> Markdown version of [/jobs/ext/2261023-it-information-security-analyst-compliance](https://www.wearedevelopers.com/jobs/ext/2261023-it-information-security-analyst-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Information Security Analyst - Compliance - **Company:** Adecco - **Location:** Yorkshire, UK - **Experience:** Expert - **Salary:** £45,000.0 - £55,000.0 - **Contract:** Temporary contract - **Skills:** Software System Penetration Testing, Cyber Security, Information Systems, Data Security, Document Management Systems, Security Information and Event Management, Software Vulnerability Management, Information Security Management System, Information Technology, CIS Benchmarks, Vulnerability Analysis - **Published:** August 26, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815187712-it-information-security-analyst-compliance ## About the Role * Approximately five years' experience in an Information Security Analyst, Cyber Compliance Analyst, or similar InfoSec compliance role. * Strong working knowledge of ISO 27001, GRC processes, audit cycles, risk management, and documentation control. * Experience with SIEM, EDR, SDR, and investigative processes. * Understanding of vulnerability management and penetration testing concepts., * Confident interpreting and applying standards such as ISO 27001, NIST, and Cyber Essentials. * Excellent communication skills suited to a professional services environment. * Highly organised with the ability to maintain accurate compliance evidence, logs, and documentation. * Able to travel occasionally to client sites., * ISO 27001 Lead Auditor or Lead Implementer * NIST CSF Practitioner * CRISC (Certified in Risk and Information Systems Control) * CEH (Certified Ethical Hacker) * CompTIA CySA+ * ISO 27701 Practitioner * GIAC certifications (e.g., GSEC, GCIH, GMON) ## Description IT Information Security Analyst - Compliance Salary: £45,000 - £55,000 (DOE) Contract: Fixed Term Contract Travel: Some travel to client sites required Location: West Midlands or Yorkshire / Hybrid A fantastic opportunity has arisen for an IT Information Security Analyst to join a respected professional services organisation with a strong heritage in delivering expert consultancy across complex, regulated environments. This role is ideal for someone passionate about cybersecurity compliance, audit readiness, and maintaining robust security standards across the business. Seniority level Mid-Senior level Employment type Part-time Job function Information Technology Industries Data Security Software Products Key Responsibilities * Security Compliance & Governance + Support and maintain compliance with ISO 27001, contributing to the operation, monitoring, and continual improvement of the ISMS. + Ensure alignment with wider frameworks such as NIST CSF, Cyber Essentials / Cyber Essentials Plus, and organisational GRC policies. + Assist with internal and external audits, evidence gathering, non-conformity remediation, and compliance documentation. + Help ensure compliance with legal, regulatory, and contractual requirements relating to data protection, risk, supplier oversight, and information governance. * Monitoring & Investigation + Proactively monitor cyber events using SIEM technologies, initiating investigations where anomalies or threats are detected. + Support deeper incident reviews, escalating where required to senior InfoSec or the SOC. + Participate in regular vulnerability scanning and technical compliance checks. * Training & Awareness + Deliver security awareness activities across the organisation, supporting ISO 27001 competence and awareness controls. + Promote a strong security culture, encouraging best-practice behaviours and reporting of risks. * Operational Security Activities + Support vulnerability management, risk assessments, and maintenance of risk registers. + Assist technical teams in aligning projects and changes with required compliance controls and security baselines. Ideal Candidate Profile * Approximately five years' experience in an Information Security Analyst, Cyber Compliance Analyst, or similar InfoSec compliance role. * Strong working knowledge of ISO 27001, GRC processes, audit cycles, risk management, and documentation control. * Experience with SIEM, EDR, SDR, and investigative processes. * Understanding of vulnerability management and penetration testing concepts. Skills & Attributes * Confident interpreting and applying standards such as ISO 27001, NIST, and Cyber Essentials. * Excellent communication skills suited to a professional services environment. * Highly organised with the ability to maintain accurate compliance evidence, logs, and documentation. * Able to travel occasionally to client sites. Qualifications (Desirable) * ISO 27001 Lead Auditor or Lead Implementer * NIST CSF Practitioner * CRISC (Certified in Risk and Information Systems Control) * CEH (Certified Ethical Hacker) * CompTIA CySA+ * ISO 27701 Practitioner * GIAC certifications (e.g., GSEC, GCIH, GMON) Adecco operates as an Employment Agency and is an equal opportunities employer. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary Germany](https://www.wearedevelopers.com/magazine/277-data-analyst-salary-germany) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)