Information Security Compliance Analyst Hatfield / Hybrid 12-Month Fixed Term Contract
The Role
As an Information Security Compliance Analyst, you will play a key role in supporting the development, maintenance, and continual improvement of the EMEA Information Security Management System (ISMS).
You will ensure compliance with Global EIT strategy, EMEA business requirements, and relevant legislation, including NIS2, the AI Act, and GDPR. The role is responsible for maintaining ISO 27001:2022 certification, supporting audits, and ensuring adherence to health, safety, financial, and data privacy regulations.
Working closely with technical teams, business stakeholders, and senior leadership, you will help embed strong information security governance and awareness across multiple business units.
What We’re Looking For
- Degree-level qualification (or equivalent experience) – essential
- CISM and/or CISSP or other relevant security certification – highly desirable
- ISO 27001:2022 Lead Implementer / Auditor certification – highly desirable
- Demonstrable experience in Information Security, IT Governance, Risk & Compliance (GRC) roles
- Proven experience maintaining and continually improving an ISO 27001-compliant ISMS
- Experience in information security management and/or security awareness programmes
- Strong knowledge of industry frameworks and regulations, including:ISO 27001:2022NIS2AI ActGDPRExtensive experience
- Conducting information security risk assessments and reporting risks
- Experience developing, implementing, and maintaining information security policies, standards, and procedures
- Strong experience in risk management and maintaining risk registers
- Experience conducting third-party risk assessments using frameworks such as ISO 27001 (essential) and ISO 31000 (desirable)
- Hands-on experience performing gap analysis, testing security controls, and supporting audits
- Experience establishing and maintaining data classification standards
- Experience designing and delivering information security awareness training across multiple business units
- Experience ensuring compliance with UK and EMEA data protection legislation, including DPA and GDPR
- Good working knowledge of a broad range of IT platforms, technologies, and services
- Strong stakeholder management skills across technical, non-technical, and executive-level audiences
- Excellent business and customer-facing experience
#J-18808-Ljbffr
Information Security Compliance Analyst in Hatfield employer: Talantir
Join an award-winning digital marketing agency in London that champions a values-driven culture, where brilliant minds collaborate to create meaningful, data-driven results. With a commitment to employee growth and a flexible hybrid working model, this agency fosters a supportive environment that encourages continuous learning and innovation, particularly in the exciting realm of AI. As part of a close-knit team, you'll have the opportunity to lead impactful projects and shape the future of digital marketing while being part of a certified B Corp dedicated to positive impact.
