Specialist, security regulatory compliance in London

We are looking for a Security Regulatory Compliance Specialist to lead and manage compliance with key security regulations such as NIS2, DORA, Telecom Security Act, and other applicable laws and standards. This role is responsible for monitoring evolving regulatory requirements, translating them into actionable controls, and ensuring the organization can demonstrate compliance through structured reporting, documentation, and governance processes. The ideal candidate has a strong background in regulatory compliance, security frameworks, and cross-functional coordination.

What you will do:

• Regulatory Compliance Management
  • Own and maintain the organization's compliance posture against key regulations (e.g., NIS2, DORA, Telecom Security Act, GDPR).
  • Analyze regulatory requirements and translate them into internal policies, controls, and procedures.
  • Develop and maintain a regulatory compliance framework and mapping to internal controls.
• Compliance Monitoring & Reporting
  • Design and manage compliance tracking mechanisms, dashboards, and KPIs.
  • Produce regular compliance reports for senior management, regulators, and internal stakeholders.
  • Ensure timely identification and escalation of compliance gaps and risks.
  • Support regulatory submissions and notifications where required.
• Regulatory Change Management
  • Continuously monitor changes in applicable laws, regulations, and industry standards.
  • Assess impact of new or updated regulations on the organization.
  • Coordinate implementation of necessary changes across security, IT, and business teams.
• Stakeholder Engagement
  • Act as the primary point of contact for regulatory compliance topics.
  • Collaborate with Legal, Risk, IT, and Security teams to ensure alignment.
  • Provide guidance to control owners on regulatory expectations and compliance requirements.
• Audit & Assurance Support
  • Support internal and external audits related to regulatory compliance.
  • Maintain documentation and evidence required to demonstrate compliance.
  • Track and support remediation of audit findings and regulatory gaps.

What we're looking for:

• Must haves:
  • Bachelor's degree in Information Security, Law, Risk Management, or related field.
  • 4-7 years of experience in regulatory compliance, GRC, or information security.
  • Strong understanding of at least two of the following: NIS2 Directive, DORA, Telecom Security regulations, GDPR and related data protection frameworks.
  • Strong regulatory interpretation and analytical skills.
  • Excellent written and verbal communication, especially for reporting.
  • Ability to translate legal/regulatory language into technical and operational requirements.
  • Strong organizational and stakeholder management skills.
  • Proactive mindset with high attention to detail.
• Might haves:
  • Professional certifications such as CISM, CISSP, CRISC, CISA, ISO 27001 Lead Implementer/Auditor.
  • Experience working with regulators or in regulated industries (e.g., telecom, financial services, critical infrastructure).
  • Familiarity with compliance tools (e.g., ServiceNow GRC, Archer, MetricStream).
  • Experience with control frameworks such as ISO 27001, NIST, or COBIT.

What we offer you:

At Colt, you'll make a difference. We empower people and employ those we trust, who come together globally to create intelligent solutions. Our global teams are full of ambitious, driven people, all working towards one shared purpose: to put the power of the digital universe in the hands of our customers wherever, whenever, and however they want.

Diversity and inclusion are at the heart of our culture here at Colt. From day one, you'll be encouraged to be yourself because we believe that's what helps our people to thrive. We welcome people with diverse backgrounds and experiences.

Our benefits support you through all parts of life, for both physical and mental health, including flexible working hours, extensive induction programs, opportunities for further development, and a global network.