Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Support customer assurance processes and manage third-party risk assessments.
- Company: Join Causeway, the UK's top construction software provider, driving digital transformation.
- Benefits: Enjoy 25 days leave, private medical insurance, and a fitness club allowance.
- Why this job: Be part of a diverse team making a real impact in the tech industry.
- Qualifications: 3+ years in information security; strong communication skills required.
- Other info: Hybrid role with a commitment to sustainability and carbon neutrality.
The predicted salary is between 36000 - 60000 £ per year.
IT Security Analyst
Hybrid (UK)
Do you want to play a key role in securing customer trust and supplier integrity at a market-leading construction software company? At Causeway, we’re looking for a highly organised, detail-driven Information Security Analyst to support our customer assurance processes and lead our third-party risk management efforts.
Who Are We? We are ranked as the UK’s #1 construction-specific software player, and our mission is simple: to provide market-leading end-to-end software solutions to the construction and construction-related industries across the entire build lifecycle. If you are looking to build an exceptional career with an award-winning company, you’ve come to the right place.
Our teams are based in the UK, Europe, USA and India, working on products that are used on a global scale. We have a clear and defined roadmap to deliver over the next three years, which is centred around a large-scale digital transformation as well as continuing our growth and expansion.
We embrace diversity and equality and want our employees to feel comfortable bringing their whole selves to work. We are committed to building a team with a variety of backgrounds, skills, and views. Creating a culture of equality isn’t just the right thing to do, it improves every aspect of our business.
Purpose As Information Security Analyst, you will be a strategic contributor supporting business development and security operations. You\’ll manage customer-facing security questionnaires, ensuring timely and accurate responses, and drive the Third-Party Due Diligence (TPDD) programme to evaluate and monitor supplier security posture. Your work will help reduce risk exposure, maintain compliance, and uphold Causeway’s reputation as a trusted technology provider.
Responsibilities
Customer Compliance
- Own and manage responses to security-based customer questionnaires (SIG, CAIQ, bespoke).
- Work cross-functionally with Legal, Compliance, Security, Procurement, and Product teams to deliver accurate, deadline-driven responses.
- Maintain the security assurance matrix to reflect the latest controls aligned with ISO 27001, Cyber Essentials, and SOC2.
- Act as a key point of contact for information security assurance queries from customers and internal teams.
Third-Party Due Diligence
- Conduct initial and recurring vendor risk assessments using frameworks like ISO 27001, NIST 800-53, and CIS Controls.
- Score vendors, document gaps, and recommend remediation actions.
- Manage the TPDD playbook including onboarding, periodic review, and offboarding.
- Integrate tooling for evidence collection and continuous monitoring.
- Align vendor controls with SOC 2, ISO 27001, GDPR/UK GDPR, and upcoming regulations.
Metrics & Audit Support
- Track and publish key metrics including turnaround times, risk severity, and SLA adherence.
- Provide audit artefacts and metrics for internal/external audits.
- Support access reviews across internal systems and Causeway domains.
Security Team Collaboration
- Contribute to broader security initiatives and continuous improvement within the team and organisation.
Skills, Experience, and Qualifications
Essential
- 3+ years in information security, GRC, or vendor risk management.
- Experience issuing or responding to security questionnaires and DDQs.
- Solid knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA.
- Strong communication skills, capable of translating technical risks for varied audiences.
- Right to work in the UK/EU and ability to pass background checks.
Desirable
- Certifications: CRISC, CISSP, CISA, ISO 27001 Lead Auditor.
- Familiarity with SaaS/cloud platforms (AWS, Azure, GCP).
- Understanding of secure software supply chains (SBOM, SLSA).
Benefits As a leader in employee engagement and people management, there are fantastic benefits and rewards at Causeway. We strive, year on year, to achieve recognition as an award-winning workplace that our employees love. We’ve selected just a few of the many benefits available below to show you how we take care of our Causeway stars:
- 25 days annual leave + public holidays, increasing with length of service
- 4% matched pension
- Income protection and life assurance
- Access to our award-winning benefits platform
- We take mental health seriously and have a dedicated EAP available 24/7
- £100 allowance towards a fitness club
- Dell discounts
- Private Medical Insurance
- Paid study leave + volunteering days
- Car scheme
Carbon Footprint Like all responsible companies, Causeway is aware of the need to recognise the importance of protecting our environment and addressing the climate emergency. Causeway is a carbon neutral company, and we offset our calculated carbon footprint. However, we recognise that offsetting is not a permanent solution, so we set environmental objectives to reduce our footprint year-on-year.
Our Values We are Trusted. Do the right thing, we own this.
We are Agile. Be the change, we’re on a journey.
We are Curious. Ask questions, keep learning.
We are Driven. Get stuck in, we make it happen.
#J-18808-Ljbffr
IT Security Analyst Legal & Compliance · Gerrards Cross · employer: Causeway Technologies
Contact Detail:
Causeway Technologies Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land IT Security Analyst Legal & Compliance · Gerrards Cross ·
✨Tip Number 1
Familiarise yourself with the specific compliance frameworks mentioned in the job description, such as ISO 27001 and SOC 2. Understanding these standards will not only help you in interviews but also demonstrate your commitment to the role.
✨Tip Number 2
Network with professionals in the information security field, especially those who have experience in vendor risk management. Engaging with industry peers can provide insights into the role and may even lead to referrals.
✨Tip Number 3
Prepare to discuss real-world scenarios where you've managed security questionnaires or conducted vendor assessments. Having concrete examples ready will showcase your practical experience and problem-solving skills.
✨Tip Number 4
Stay updated on the latest trends and regulations in information security, particularly those affecting the construction software industry. This knowledge will help you engage in meaningful conversations during interviews and show your proactive approach.
We think you need these skills to ace IT Security Analyst Legal & Compliance · Gerrards Cross ·
Some tips for your application 🫡
Understand the Role: Before applying, make sure to thoroughly read the job description for the IT Security Analyst position. Understand the key responsibilities and required skills, such as experience with security questionnaires and knowledge of ISO 27001.
Tailor Your CV: Customise your CV to highlight relevant experience in information security, GRC, or vendor risk management. Emphasise any certifications you hold, such as CRISC or CISSP, and ensure your skills align with the job requirements.
Craft a Compelling Cover Letter: Write a cover letter that showcases your passion for information security and your understanding of the company's mission. Mention specific experiences that demonstrate your ability to manage customer compliance and third-party due diligence.
Proofread Your Application: Before submitting, carefully proofread your application materials. Check for spelling and grammatical errors, and ensure that all information is accurate and presented clearly. A polished application reflects your attention to detail.
How to prepare for a job interview at Causeway Technologies
✨Understand the Role
Make sure you thoroughly understand the responsibilities of an IT Security Analyst, especially in relation to customer compliance and third-party risk management. Familiarise yourself with key frameworks like ISO 27001 and SOC 2, as these will likely come up during your interview.
✨Prepare for Technical Questions
Expect questions that assess your knowledge of information security principles and practices. Be ready to discuss your experience with security questionnaires and vendor risk assessments, as well as how you would handle specific scenarios related to compliance and security.
✨Showcase Your Communication Skills
As this role requires collaboration across various teams, demonstrate your ability to communicate complex technical concepts clearly. Prepare examples of how you've successfully conveyed security risks to non-technical stakeholders in the past.
✨Align with Company Values
Research Causeway's values and think about how your personal values align with theirs. Be prepared to discuss how you embody traits like trust, agility, curiosity, and drive in your professional life, as cultural fit is often a key consideration in interviews.
