IT Security Compliance Lead

We’re looking for a proactive and security-focused IT Security Compliance Lead to join our ICT and Business Support Team.

This is an exciting opportunity to help strengthen Be One Homes’ cyber security posture and ensure we maintain a robust approach to security governance, compliance and awareness. Working closely with colleagues across the organisation and external partners, you’ll play a key role in protecting sensitive information, reducing risk and promoting a positive security culture.

As IT Security Compliance Lead, you’ll lead on security compliance activities, coordinate responses to security incidents, deliver engaging awareness programmes and support alignment with recognised frameworks including ISO 27001 and the NIST Cybersecurity Framework., * Lead IT security compliance activities, supporting alignment with ISO 27001 and NIST requirements.

• Conduct security audits and reviews, including user access, privileged accounts and device compliance.
• Act as the first point of contact for security incidents, coordinating investigations and appropriate escalation.
• Deliver engaging cyber security awareness and training programmes across the organisation.
• Manage phishing simulation campaigns and use insights to improve colleague security behaviours.
• Produce compliance, audit and incident reports for senior management and governance groups.
• Work with internal teams and external partners to strengthen security controls and reduce organisational risk.
• Promote a positive security culture and encourage the early reporting of cyber security concerns.

• Experience of IT security compliance, auditing or governance activities.
• Experience investigating, coordinating or supporting responses to security incidents.
• Strong understanding of cyber security frameworks and standards, particularly ISO 27001 and NIST.
• Excellent communication skills with the ability to explain security concepts to non-technical audiences.
• Strong organisational skills with the ability to manage competing priorities and deadlines.
• Ability to build effective relationships with colleagues, stakeholders and external partners.
• Good Microsoft 365 and digital skills.
• Commitment to continuous professional development and creating an inclusive workplace.

Desirable

• Relevant Cyber Security and/or Information Governance qualification.
• CompTIA Security+ certification.
• CISSP (Certified Information Systems Security Professional) certification.
• Experience using Microsoft 365 security and compliance tools, including Purview, Defender, Entra ID and Intune.
• Experience delivering phishing simulation programmes and analysing behavioural data.
• Understanding of UK GDPR and incident management requirements.
• Health and safety awareness.
• Housing sector knowledge.

What we offer

• Hybrid working & flexibility - supporting work-life balance
• Generous annual leave - starting at 27 days, rising to 32 days after 5 years plus bank holidays
• Birthday day off - take your birthday as paid leave
• Buy or sell annual leave - flexible options to suit your lifestyle
• Local bank holiday - extra day off around New Year
• Enhanced maternity, paternity & adoption pay
• Free on-site parking at key office locations
• Employee Assistance Programme - emotional wellbeing support for you and your family
• Cycle to Work & Car Leasing Schemes - save on tax and NI
• Pension schemes with life insurance cover
• Perkbox - an employee engagement platform with perks, benefits, rewards, wellbeing resources, discounts, freebies and more
• Healthcare cash plan - claim back costs for dental, optical, physio & more
• Lifestyle discounts - cashback and savings at major retailers
• Learning & development opportunities - grow your career
• Volunteer days - up to 5 paid days to give back