Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Manage security questionnaires and vendor risk assessments to ensure compliance.
- Company: Join Causeway, the UK's top construction software provider, committed to innovation and diversity.
- Benefits: Enjoy 25 days leave, matched pension, private medical insurance, and fitness allowances.
- Why this job: Be part of a dynamic team driving digital transformation in a trusted tech company.
- Qualifications: 3+ years in information security with strong communication skills and knowledge of compliance standards.
- Other info: Work hybrid in a carbon-neutral company focused on reducing its environmental impact.
The predicted salary is between 36000 - 60000 £ per year.
IT Security Analyst
Hybrid (UK)
Do you want to play a key role in securing customer trust and supplier integrity at a market-leading construction software company? At Causeway, we’re looking for a highly organised, detail-driven Information Security Analyst to support our customer assurance processes and lead our third-party risk management efforts.
Who Are We? We are ranked as the UK’s #1 construction-specific software player, and our mission is simple: to provide market-leading end-to-end software solutions to the construction and construction-related industries across the entire build lifecycle. If you are looking to build an exceptional career with an award-winning company, you’ve come to the right place.
Our teams are based in the UK, Europe, USA and India, working on products that are used on a global scale. We have a clear and defined roadmap to deliver over the next three years, which is centred around a large-scale digital transformation as well as continuing our growth and expansion.
We embrace diversity and equality and want our employees to feel comfortable bringing their whole selves to work. We are committed to building a team with a variety of backgrounds, skills, and views. Creating a culture of equality isn’t just the right thing to do, it improves every aspect of our business.
Purpose As Information Security Analyst, you will be a strategic contributor supporting business development and security operations. You\’ll manage customer-facing security questionnaires, ensuring timely and accurate responses, and drive the Third-Party Due Diligence (TPDD) programme to evaluate and monitor supplier security posture. Your work will help reduce risk exposure, maintain compliance, and uphold Causeway’s reputation as a trusted technology provider.
Responsibilities
Customer Compliance
- Own and manage responses to security-based customer questionnaires (SIG, CAIQ, bespoke).
- Work cross-functionally with Legal, Compliance, Security, Procurement, and Product teams to deliver accurate, deadline-driven responses.
- Maintain the security assurance matrix to reflect the latest controls aligned with ISO 27001, Cyber Essentials, and SOC2.
- Act as a key point of contact for information security assurance queries from customers and internal teams.
Third-Party Due Diligence
- Conduct initial and recurring vendor risk assessments using frameworks like ISO 27001, NIST 800-53, and CIS Controls.
- Score vendors, document gaps, and recommend remediation actions.
- Manage the TPDD playbook including onboarding, periodic review, and offboarding.
- Integrate tooling for evidence collection and continuous monitoring.
- Align vendor controls with SOC 2, ISO 27001, GDPR/UK GDPR, and upcoming regulations.
Metrics & Audit Support
- Track and publish key metrics including turnaround times, risk severity, and SLA adherence.
- Provide audit artefacts and metrics for internal/external audits.
- Support access reviews across internal systems and Causeway domains.
Security Team Collaboration
- Contribute to broader security initiatives and continuous improvement within the team and organisation.
Skills, Experience, and Qualifications
Essential
- 3+ years in information security, GRC, or vendor risk management.
- Experience issuing or responding to security questionnaires and DDQs.
- Solid knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA.
- Strong communication skills, capable of translating technical risks for varied audiences.
- Right to work in the UK/EU and ability to pass background checks.
Desirable
- Certifications: CRISC, CISSP, CISA, ISO 27001 Lead Auditor.
- Familiarity with SaaS/cloud platforms (AWS, Azure, GCP).
- Understanding of secure software supply chains (SBOM, SLSA).
Benefits As a leader in employee engagement and people management, there are fantastic benefits and rewards at Causeway. We strive, year on year, to achieve recognition as an award-winning workplace that our employees love. We’ve selected just a few of the many benefits available below to show you how we take care of our Causeway stars:
- 25 days annual leave + public holidays, increasing with length of service
- 4% matched pension
- Income protection and life assurance
- Access to our award-winning benefits platform
- We take mental health seriously and have a dedicated EAP available 24/7
- £100 allowance towards a fitness club
- Dell discounts
- Private Medical Insurance
- Paid study leave + volunteering days
- Car scheme
Carbon Footprint Like all responsible companies, Causeway is aware of the need to recognise the importance of protecting our environment and addressing the climate emergency. Causeway is a carbon neutral company, and we offset our calculated carbon footprint. However, we recognise that offsetting is not a permanent solution, so we set environmental objectives to reduce our footprint year-on-year.
Our Values We are Trusted. Do the right thing, we own this.
We are Agile. Be the change, we’re on a journey.
We are Curious. Ask questions, keep learning.
We are Driven. Get stuck in, we make it happen.
#J-18808-Ljbffr
IT Security Analyst Legal & Compliance · Gerrards Cross · employer: Causeway Technologies
Contact Detail:
Causeway Technologies Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land IT Security Analyst Legal & Compliance · Gerrards Cross ·
✨Tip Number 1
Familiarise yourself with the specific compliance frameworks mentioned in the job description, such as ISO 27001 and SOC 2. Understanding these standards will not only help you in interviews but also demonstrate your commitment to the role.
✨Tip Number 2
Network with professionals in the information security field, especially those who have experience in vendor risk management. Engaging with industry peers can provide valuable insights and potentially lead to referrals.
✨Tip Number 3
Prepare to discuss real-world scenarios where you've managed security questionnaires or conducted vendor assessments. Having concrete examples ready will showcase your practical experience and problem-solving skills.
✨Tip Number 4
Stay updated on the latest trends and regulations in information security, particularly those affecting the construction software industry. This knowledge will help you engage in meaningful conversations during interviews and show your proactive approach.
We think you need these skills to ace IT Security Analyst Legal & Compliance · Gerrards Cross ·
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights relevant experience in information security, GRC, or vendor risk management. Emphasise your familiarity with ISO 27001, SOC 2, and GDPR/CCPA, as these are crucial for the role.
Craft a Compelling Cover Letter: In your cover letter, express your enthusiasm for the position and the company. Mention specific projects or experiences that demonstrate your ability to manage customer compliance and third-party due diligence effectively.
Showcase Communication Skills: Since strong communication skills are essential for this role, provide examples in your application of how you've successfully translated technical risks for varied audiences in previous positions.
Highlight Relevant Certifications: If you have certifications like CRISC, CISSP, or CISA, be sure to mention them in your application. These qualifications can set you apart from other candidates and show your commitment to the field.
How to prepare for a job interview at Causeway Technologies
✨Understand the Role
Make sure you thoroughly understand the responsibilities of an IT Security Analyst, especially in relation to customer compliance and third-party risk management. Familiarise yourself with key frameworks like ISO 27001 and SOC 2, as these will likely come up during your interview.
✨Prepare for Technical Questions
Expect questions that assess your knowledge of information security principles and practices. Be ready to discuss your experience with security questionnaires and vendor risk assessments, as well as how you would handle specific scenarios related to compliance and security.
✨Showcase Your Communication Skills
As this role requires collaboration across various teams, demonstrate your ability to communicate complex technical concepts clearly. Prepare examples of how you've successfully conveyed security risks to non-technical stakeholders in the past.
✨Align with Company Values
Research Causeway's values—Trust, Agility, Curiosity, and Drive—and think about how your personal values align with theirs. Be prepared to share examples from your experience that reflect these values, showing that you would be a good cultural fit for the team.
