Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead security compliance and certification activities for Cyber Essentials and ISO 27001.
- Company: Dynamic software and IT services company focused on cybersecurity.
- Benefits: Hybrid working, strong career progression, and a chance to shape security compliance.
- Other info: Join a growing team with opportunities for advancement into senior roles.
- Why this job: Make a real impact in cybersecurity while growing your career in a tech-savvy environment.
- Qualifications: Experience with Cyber Essentials, information security, and compliance frameworks.
The predicted salary is between 40000 - 50000 £ per year.
A leading software and IT services company is seeking a Security Compliance Officer with experience in Cyber Essentials and/or Cyber Essentials Plus to take ownership of security compliance and certification activities across both internal systems and client environments.
This is a key hire within a growing technical organisation where cybersecurity assurance, governance, and compliance are increasingly central to customer delivery and commercial growth.
Key Responsibilities- Lead and manage Cyber Essentials and Cyber Essentials Plus (CE+) assessments and certification activities
- Maintain and improve compliance with key frameworks including ISO 27001, GDPR, and internal security policies
- Conduct internal security audits, control reviews, and risk assessments
- Support evidence collection and audit readiness across technical teams
- Work closely with IT support, DevOps, and engineering teams to ensure security controls are implemented and maintained
- Handle client-facing security questionnaires and compliance requirements
- Assist in improving the organisation's overall security posture and governance framework
- Experience working with Cyber Essentials and/or Cyber Essentials Plus frameworks and assessments
- Strong understanding of Cyber Essentials / Cyber Essentials Plus requirements
- Experience in information security, compliance, GRC, or IT security roles
- Familiarity with ISO 27001 or similar security frameworks
- Experience working with technical teams (MSP, software, or IT environments preferred)
- IASME Cyber Essentials Assessor/Auditor qualification
- ISO 27001 Lead Auditor or Implementation experience
- CISSP, CISM, CISA, or equivalent certifications
- Experience within MSP, SaaS, or software delivery environments
- Exposure to client-facing compliance or consultancy work
- Hybrid working (Essex-based office with flexibility)
- Opportunity to own and shape security compliance in a growing technical business
- Exposure to both internal security operations and external client compliance requirements
- Strong career progression into GRC, Security Manager, or Head of Compliance roles
Cyber Security Analyst employer: Nextech Group Limited
Contact Detail:
Nextech Group Limited Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Cyber Security Analyst
✨Tip Number 1
Network like a pro! Reach out to folks in the cybersecurity field on LinkedIn or at local meetups. You never know who might have the inside scoop on job openings or can refer you directly.
✨Tip Number 2
Show off your skills! Create a portfolio or a personal website showcasing your projects, certifications, and any relevant experience. This gives potential employers a tangible look at what you can bring to the table.
✨Tip Number 3
Prepare for interviews by brushing up on common cybersecurity scenarios and compliance questions. Practise articulating how your experience aligns with the role, especially around Cyber Essentials and ISO 27001.
✨Tip Number 4
Don’t forget to apply through our website! We’ve got loads of opportunities waiting for you, and applying directly can sometimes give you a leg up in the hiring process.
We think you need these skills to ace Cyber Security Analyst
Some tips for your application 🫡
Tailor Your CV: Make sure your CV speaks directly to the job description. Highlight your experience with Cyber Essentials and any relevant frameworks like ISO 27001. We want to see how your skills match what we're looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about cybersecurity and how you can contribute to our team. Keep it concise but impactful – we love a good story!
Showcase Relevant Experience: When detailing your experience, focus on roles where you've handled compliance, audits, or worked with technical teams. We’re keen to see how you've tackled challenges in the past and what you've learned from them.
Apply Through Our Website: We encourage you to apply through our website for a smoother process. It helps us keep track of applications and ensures you don’t miss out on any important updates. Plus, it’s super easy!
How to prepare for a job interview at Nextech Group Limited
✨Know Your Cyber Essentials Inside Out
Make sure you’re well-versed in the Cyber Essentials and Cyber Essentials Plus frameworks. Brush up on their requirements and be ready to discuss how you've applied them in past roles. This will show your potential employer that you’re not just familiar with the concepts, but that you can actively contribute to their compliance efforts.
✨Showcase Your Audit Experience
Prepare to talk about your experience with internal security audits and risk assessments. Have specific examples ready that demonstrate how you’ve identified vulnerabilities and improved compliance. This will highlight your proactive approach to security and your ability to work with technical teams.
✨Understand the Bigger Picture
Familiarise yourself with ISO 27001, GDPR, and other relevant frameworks. Be prepared to discuss how these regulations impact security compliance and governance. Showing that you understand the broader context of cybersecurity will impress interviewers and demonstrate your strategic thinking.
✨Be Ready for Client-Facing Scenarios
Since the role involves handling client-facing security questionnaires, think of examples where you’ve successfully managed client compliance requirements. Practice articulating how you’ve communicated complex security concepts to non-technical stakeholders, as this is crucial for building trust with clients.