Information Security Analyst in Hereford

We're looking for an Information Security Analyst to join our Compliance team and support the ongoing development and maintenance of allpay's information security framework. This is a varied role where you'll work closely with the Director of Governance, Information Security Manager and Cyber Security Operations Centre (CSOC) team to help ensure compliance with key information security, data protection and industry standards. You'll support audits, compliance activities, assurance programmes and security initiatives that help protect allpay, our clients and our customers. You'll support the delivery of information security, compliance and assurance activities across the business.

Your key responsibilities include:

• Supporting compliance with standards and frameworks including ISO 27001, PCI DSS, Cyber Essentials Plus and UK GDPR.
• Assisting with the management and monitoring of allpay's PCI DSS compliance programme.
• Producing compliance reports, security KPIs and management information.
• Supporting data mapping activities to meet data protection requirements.
• Managing supplier assurance and third-party security reviews.
• Supporting clients and internal teams with PCI DSS and information security requirements.
• Assisting with internal and external audits, including evidence gathering, control reviews and remediation actions.
• Maintaining Cyber Essentials Plus certification and supporting card scheme accreditation activities.
• Providing information security guidance and support to stakeholders across the business.

About You

We're looking for someone who is organised, analytical and passionate about information security, compliance and risk management. You'll bring:

• Strong communication skills and the ability to work effectively with stakeholders at all levels.
• Excellent organisational skills and the ability to manage multiple priorities.
• Strong attention to detail and report-writing skills.
• Experience using Microsoft Office applications, particularly Word, Excel and SharePoint.
• The ability to work collaboratively as part of a team while also using your own initiative.
• A proactive approach to problem-solving and continuous improvement.
• The ability to remain organised and effective in a fast-paced environment.

While not essential, it would be beneficial if you have:

• Experience working within information security, compliance or governance functions.
• Knowledge of PCI DSS and payment card industry requirements.
• Awareness of ISO 27001 and information security management principles.
• Experience supporting audits, risk assessments or compliance reviews.
• A relevant information security qualification, or an interest in working towards one.

Here at allpay, we follow an Office First working model, reflecting the importance we place on in-person collaboration across our teams, most of whom are based on-site. While we are open to discussing flexible working arrangements, a strong on-site presence will be essential to support the existing teams and projects. If you feel you have the experiences and drive to excel as our Information Security Analyst, we would love to hear from you!

About Us

Why Join allpay? People are at the heart of allpay, and we're proud to offer a competitive benefits package. This includes, Defined contribution group pension scheme, Income protection, Life assurance, Private Healthcare and a wide range of health and wellbeing options, as well as excellent Learning and Development opportunities.

On-Site Amenities at Hereford:

• Subsidised Café & Restaurant - Enjoy great food and quality coffee at discounted prices in our staff-only café and restaurant.
• Staff Gym - Free access to our on-site gym, making it easy to fit exercise into your day.
• The Sidings - Our on-site farm shop and café, open to the public, offering fresh local produce and a relaxed space to unwind.

These amenities mean you can enjoy a healthy lunch, fit in exercise before or after work, and take quality breaks without needing to travel.

Think You Need to Tick Every Single Box? You Really Don't. If this role catches your eye, apply. We prioritise attitude, behaviours and our shared values. Skills grow; integrity, agility and curiosity are what make you stand out. We welcome brilliant people from all backgrounds, identities and experiences, including those who think differently, learn differently, or bring unique approaches to problem-solving. Different minds make our teams stronger.

If you'd benefit from any adjustments or support during the recruitment process, whether that's extra time, a quieter space, a different format, or something else that helps you shine, just let us know. We're here to make the process work for you.

Recruitment Agency Information: While we work with excellent recruitment agencies, we are selective about who we engage with. CVs will only be accepted once contractual terms and campaign agreements have been formally approved by our People Team. To ensure fairness and compliance, CVs must not be submitted via email. Unsolicited CVs, including those from existing partners, will not be considered and will be treated as a free gift. If we choose to engage with these candidates, no fees will be payable, and submission implies acceptance of these terms. We appreciate your support in maintaining a smooth and transparent recruitment process. We are a company committed to Equal Opportunities. All roles at allpay Limited are subject to successful background checks, including a DBS check and credit check.