IT Information Security Analyst - Compliance

IT Information Security Analyst - Compliance

Salary: £45,000 - £55,000 (DOE) Contract: Fixed Term Contract Travel: Some travel to client sites required Location: West Midlands or Yorkshire / Hybrid

A fantastic opportunity has arisen for an IT Information Security Analyst to join a respected professional services organisation with a strong heritage in delivering expert consultancy across complex, regulated environments. This role is ideal for someone passionate about cybersecurity compliance, audit readiness, and maintaining robust security standards across the business.

Seniority level

Mid-Senior level

Employment type

Part-time

Job function

Information Technology

Industries

Data Security Software Products

Key Responsibilities

• Security Compliance & Governance
• Support and maintain compliance with ISO 27001, contributing to the operation, monitoring, and continual improvement of the ISMS.
• Ensure alignment with wider frameworks such as NIST CSF, Cyber Essentials / Cyber Essentials Plus, and organisational GRC policies.
• Assist with internal and external audits, evidence gathering, non-conformity remediation, and compliance documentation.
• Help ensure compliance with legal, regulatory, and contractual requirements relating to data protection, risk, supplier oversight, and information governance.
• Monitoring & Investigation
• Proactively monitor cyber events using SIEM technologies, initiating investigations where anomalies or threats are detected.
• Support deeper incident reviews, escalating where required to senior InfoSec or the SOC.
• Participate in regular vulnerability scanning and technical compliance checks.
• Training & Awareness
• Deliver security awareness activities across the organisation, supporting ISO 27001 competence and awareness controls.
• Promote a strong security culture, encouraging best-practice behaviours and reporting of risks.
• Operational Security Activities
• Support vulnerability management, risk assessments, and maintenance of risk registers.
• Assist technical teams in aligning projects and changes with required compliance controls and security baselines.

Ideal Candidate Profile

• Approximately five years’ experience in an Information Security Analyst, Cyber Compliance Analyst, or similar InfoSec compliance role.
• Strong working knowledge of ISO 27001, GRC processes, audit cycles, risk management, and documentation control.
• Experience with SIEM, EDR, SDR, and investigative processes.
• Understanding of vulnerability management and penetration testing concepts.

Skills & Attributes

• Confident interpreting and applying standards such as ISO 27001, NIST, and Cyber Essentials.
• Excellent communication skills suited to a professional services environment.
• Highly organised with the ability to maintain accurate compliance evidence, logs, and documentation.
• Able to travel occasionally to client sites.

Qualifications (Desirable)

• ISO 27001 Lead Auditor or Lead Implementer
• NIST CSF Practitioner
• CRISC (Certified in Risk and Information Systems Control)
• CEH (Certified Ethical Hacker)
• CompTIA CySA+
• ISO 27701 Practitioner
• GIAC certifications (e.g., GSEC, GCIH, GMON)

Adecco operates as an Employment Agency and is an equal opportunities employer.

• Approximately five years’ experience in an Information Security Analyst, Cyber Compliance Analyst, or similar InfoSec compliance role.
• Strong working knowledge of ISO 27001, GRC processes, audit cycles, risk management, and documentation control.
• Experience with SIEM, EDR, SDR, and investigative processes.
• Understanding of vulnerability management and penetration testing concepts., * Confident interpreting and applying standards such as ISO 27001, NIST, and Cyber Essentials.
• Excellent communication skills suited to a professional services environment.
• Highly organised with the ability to maintain accurate compliance evidence, logs, and documentation.
• Able to travel occasionally to client sites., * ISO 27001 Lead Auditor or Lead Implementer
• NIST CSF Practitioner
• CRISC (Certified in Risk and Information Systems Control)
• CEH (Certified Ethical Hacker)
• CompTIA CySA+
• ISO 27701 Practitioner
• GIAC certifications (e.g., GSEC, GCIH, GMON)