Security Governance and Compliance Analyst

We’re looking for a Security Governance & Compliance Analyst to join our Cyber Security team within the Technology directorate. Reporting to the Security Compliance Manager, you’ll play a key role in supporting the organisation’s cyber security governance, risk, and compliance activities. In this role, you’ll help ensure that effective security policies, standards, and controls are implemented and maintained across the organisation. You’ll contribute to protecting the confidentiality, integrity, and availability of information systems while supporting compliance with recognised standards. Working closely with Security Operations, Cyber Assurance, and wider technology teams, you’ll help embed governance processes across projects, operational services, and third-party relationships, making a real impact on how we manage and reduce cyber risk.

About you

• You’re detail-oriented, proactive, and passionate about cyber security governance and risk management.
• You enjoy working collaboratively across teams and can confidently communicate complex security concepts to a range of stakeholders.
• You’re motivated to continuously learn and stay up to date with evolving cyber security standards, legislation, and best practices.
• You take ownership of your work and are committed to maintaining high standards of accuracy, compliance, and professionalism.

You’ll have:

• Experience supporting cyber security governance, risk, and compliance activities.
• Knowledge of security frameworks and standards such as ISO27001, Cyber Essentials Plus, and PCI-DSS.
• Understanding of risk management processes and maintaining risk registers.
• Experience supporting audits, assurance reviews, and certification activities.
• Ability to interpret and apply security policies, standards, and control frameworks.
• Strong communication skills with the ability to engage both technical and non-technical stakeholders.
• Experience working collaboratively across technology and business teams.
• A commitment to data protection, confidentiality, and organisational policies.

What you’ll focus on:

• Supporting the development and maintenance of cyber security policies, standards, and procedures.
• Maintaining and updating the cyber security risk register, ensuring risks are tracked through to resolution.
• Identifying and assessing risks linked to new systems, projects, and technology changes.
• Supporting compliance with cyber security standards, regulations, and data protection requirements.
• Assisting with internal and external audits, certification activities, and assurance reviews.
• Collecting and managing evidence for compliance and certification purposes.
• Monitoring adherence to policies and identifying areas for improvement.
• Supporting third-party and supplier security assurance activities.
• Producing governance reports, dashboards, and briefings for stakeholders.
• Communicating cyber security risks and governance issues across the organisation.
• Promoting awareness of cyber security governance and risk management practices.

Our commitment to Equity, Diversity, Inclusion & Belonging

We need to ensure the voices around our table better reflect and understand the communities we exist to serve. We strongly encourage individuals to apply who have a disability, impairment or health condition or individuals who identify as Black, Asian or from another minority ethnic background, as these groups are currently under-represented at Alzheimer’s Society. We want everyone we work with, as a colleague, volunteer, supporter, or someone we support, to feel included and that they belong at Alzheimer’s Society. Our Equity, Diversity and Inclusion Strategy here along with our internal employee forum and Employee Lived Experience network groups help us promote inclusion and belonging, becoming an engaged and inclusive organisation for all our people.

Giving back to you

Our employees work hard every day to make a true difference in people's lives. We are proud to support them with a range of benefits, recognition and many options for working agilely, all contributing to a strong work life balance. We also have various learning programmes to support you in your development and help you grow to realise your potential and shape a career with Alzheimer’s Society.