Search #: 499074 Work type: Full-time Location: Storrs Campus Categories: Information Technology JOB SUMMARY Under the general direction of the Chief Information Security Officer, the Information Security Policy, Compliance and Risk Analyst is responsible for the development and operation of UConn's Information Security Governance, Risk and Compliance activities. The analyst develops policy recommendations, standards, risk assessments and technical solutions. This role will assess, develop and maintain a set of defined control standards designed to improve UConn's information security posture through periodic assessments against the established standards and industry … best practices. The Information Security Policy, Compliance and Risk Analyst is responsible for investigating a diverse range of policy, compliance and technical issues across multiple platforms, working with a wide range of clients whose technical skills range from minimal to extensive. The analyst works among More ❯
Hatfield, England, United Kingdom Hybrid / WFH Options
Eisai EMEA
Join to apply for the Information SecurityComplianceAnalyst role at Eisai EMEA Join to apply for the Information SecurityComplianceAnalyst role at Eisai EMEA Get AI-powered advice on this job and more exclusive features. Direct message the job poster from Eisai … which means that we put the patient first in everything we do. Your new role **12 month fixed term contract (Salaried) As an Information SecurityComplianceAnalyst, you will Support the development and maintenance of the EMEA information security management system, ensuring compliance with Global … CISSP or other relevant certification is highly desirable ISO 27001:2022 Lead Implementer/Auditor certification is highly desirable Demonstratable experience in an Information Security, IT Governance, Risk and Compliance based role, including maintaining and continually improving an ISO 27001 compliant management system. Experience of information securityMore ❯
Information SecurityComplianceAnalyst 12 Month Fixed Term Contract Salary: Negotiable Hybrid - Hertfordshire As an Information SecurityComplianceAnalyst, you will support the development and maintenance of the EMEA wide information security management system in accordance with Global EIT strategy, EMEA business requirements … and relevant information security legislation, including NIS 2, AI Act and GDPR. You will ensure the continued certification of the EIT ISO 27001:2022 management system and adherence by the EMEA EIT department to all relevant legislation and regulations, including but not limited to Health and Safety, Financial and … Privacy laws. Main duties/responsibilities: Conduct information security, information system, and compliance-based risk assessments, evaluate responses and recommend risk treatment actions Develop and execute risk mitigation plans in conjunction with relevant internal and external stakeholders/groups and to agreed timescales, following through to completion Support More ❯
SecurityComplianceAnalyst/IAM Consultant - Global Tech Job Title: SecurityComplianceAnalyst/IAM Location: London - remotely Duration: 12 Months - inside IR35 - PAYE - paid on a weekly basis Annual Salary: £72000 - £82000 doe and location Note: Candidates to be considered for this opportunity … must be based in the UK and hold appropriate work permit. About the Role: We’re looking for an experienced Security Operations Analyst/IAM Consultant to join a leading global tech company’s Security and Access team. This role focuses on ensuring compliance with security policies, managing access controls, and supporting incident management for third-party vendors. If you’re passionate about information security, thrive in fast-paced environments, and have a knack for solving problems at scale, this could be the perfect fit for you. Key Responsibilities: Support access compliance and More ❯
Social network you want to login/join with: SecurityComplianceAnalyst - Law Firm, London col-narrow-left Client: Location: London, United Kingdom Job Category: Other - EU work permit required: Yes col-narrow-right Job Reference: ab4b557cd7b0 Job Views: 11 Posted: 26.04.2025 Expiry Date: 10.06.2025 col-wide … Job Description: Role Do you want to work for a global law firm ensuring the security environment is compliant with frameworks? Join this team as a SecurityComplianceAnalyst and play a vital role in maintaining a secure environment. You’ll have the opportunity to work … alongside a team of information security specialists, collaborating and exchanging knowledge to enhance security practices. You will work alongside 4 other information security specialists You will work on a 12 month fixed term contract that is highly likely to be made permanent You will be responsible for More ❯
London, England, United Kingdom Hybrid / WFH Options
Planet Pharma
Direct message the job poster from Planet Pharma Job Title: Information SecurityComplianceAnalyst Location: Hertfordshire, UK (Hybrid) Are you passionate about cybersecurity, compliance, and driving risk management strategies? We’re seeking an experienced Information SecurityComplianceAnalyst to join a dynamic team … supporting the development and maintenance of an EMEA-wide Information Security Management System. This role plays a critical part in maintaining ISO 27001:2022 certification, ensuring compliance with legislation including NIS 2, GDPR, and the AI Act, and promoting a strong security culture across the business. Requirements … ISO 27001 Lead Implementer or Auditor certification (essential). Demonstrated experience in an Information Security or IT Governance role. Strong knowledge of frameworks like ISO 27001/27002, NIST, GDPR, and related standards. Proven ability to manage audits, compliance reporting, and security training programs. Excellent stakeholder management More ❯
As an Information SecurityComplianceAnalyst, you will support the development and maintenance of the EMEA wide information security management system in accordance with Global EIT strategy, EMEA business requirements and relevant information security legislation, including NIS 2, AI Act and GDPR. You will ensure … EIT department to all relevant legislation and regulations, including but not limited to Health and Safety, Financial and Privacy laws. Key Responsibilities: Conduct information security, information system, and compliance-based risk assessments, evaluate responses and recommend risk treatment actions. Develop and execute risk mitigation plans in conjunction with … relevant internal and external stakeholders/groups and to agreed timescales, following through to completion. Support the creation, implementation and maintenance of information security policies and standards, in accordance with ISO 27001 and other relevant frameworks and standards (NIST CSF, IEC 62443, CIS, GDPR etc.). Maintain the department More ❯
Social network you want to login/join with: Information SecurityComplianceAnalyst, Watford, Hertfordshire Client: Cpl Life Sciences Location: Watford, Hertfordshire, United Kingdom Job Category: Other EU work permit required: Yes Job Views: 5 Posted: 07.06.2025 Expiry Date: 22.07.2025 Job Description: We are seeking an Information … SecurityComplianceAnalyst for a 12-month fixed-term contract in a hybrid role based in Hertfordshire . You will support the development and maintenance of the EMEA-wide Information Security Management System, ensuring compliance with global strategies, business requirements, and relevant legislation such as … NIS 2, AI Act, and GDPR. Your responsibilities include: Conducting risk assessments and developing mitigation plans Supporting the creation and maintenance of security policies and standards (ISO 27001, NIST, GDPR, etc.) Maintaining security procedures and conducting tabletop exercises Managing security awareness training programs Providing security guidance More ❯
to learn more. Base pay range Direct message the job poster from TechShack Co-Founder of TechShack - Building out our Cloud/DevOps function SecurityComplianceAnalyst We're partnering with a leading cybersecurity company on the hunt for a senior-level Compliance & Assurance Specialist ready … to step into a high-impact role. This is more than just a box-ticking compliance job. It’s a strategic position at the intersection of security, risk, and commercial enablement. You’ll be the go-to voice on compliance across internal and external touchpoints, helping to … led organisation with deep expertise in cybercrime disruption and a reputation for punching far above its weight. Core Responsibilities: Architect, manage, and continuously evolve compliance frameworks (e.g., SOC 2, Cyber Essentials, FedRAMP). Lead the end-to-end audit lifecycle — from evidence gathering to external walkthroughs. Work closely with More ❯
Social network you want to login/join with: Information SecurityComplianceAnalyst, Hertfordshire Client: Cpl Life Sciences Location: Hertfordshire, United Kingdom Job Category: Other EU work permit required: Yes Job Views: 3 Posted: 28.04.2025 Expiry Date: 12.06.2025 Job Description: We are seeking an Information SecurityComplianceAnalyst for a 12-month fixed-term contract in a hybrid setting in Hertfordshire. In this role, you will support the development and maintenance of the EMEA-wide information security management system in line with global strategies, business requirements, and relevant legislation such as NIS … AI Act, and GDPR. Your responsibilities include ensuring ISO 27001:2022 certification, conducting risk assessments, developing risk mitigation plans, maintaining security policies, managing security awareness training, advising on security matters, and supporting audits. Qualifications and Experience: Degree level qualification or equivalent (highly desirable) Relevant certifications like CISM More ❯
SecurityComplianceAnalyst - French Speaker Apply locations Remote, United Kingdom time type Full time posted on Posted 25 Days Ago job requisition id R1824 The Company: Marigold helps brands foster customer relationships through the science and art of connection. Marigold Relationship Marketing is a suite of world … States, Europe, Australia, New Zealand, South America and Central America, as well as in Japan. The Role: We are seeking an experienced French-speaking SecurityComplianceAnalyst within the GRC (Governance, Risk, and Compliance) team to take the lead on managing & facilitating Marigold’s external compliance … ISO 27001. This role will involve working closely with teams across Marigold to ensure that the business and our suite of global products maintain compliance to, and can achieve certification to, all required standards. The successful individual will take responsibility for preparing for the audits, gathering evidence and working More ❯
Hertfordshire, England, United Kingdom Hybrid / WFH Options
Planet Pharma
Job Title: Information SecurityComplianceAnalyst Location: Hertfordshire, UK (Hybrid) Contract: 12-Month Fixed Term (Salaried) Are you passionate about cybersecurity, compliance, and driving risk management strategies? We’re seeking an experienced Information SecurityComplianceAnalyst to join a dynamic team supporting the … development and maintenance of an EMEA-wide Information Security Management System. This role plays a critical part in maintaining ISO 27001:2022 certification, ensuring compliance with legislation including NIS 2, GDPR, and the AI Act, and promoting a strong security culture across the business. Requirements: ISO … Lead Implementer or Auditor certification (essential). Demonstrated experience in an Information Security or IT Governance role. Strong knowledge of frameworks like ISO 27001/27002, NIST, GDPR, and related standards. Proven ability to manage audits, compliance reporting, and security training programs. Excellent stakeholder management, communication, and More ❯
hertfordshire, east anglia, united kingdom Hybrid / WFH Options
Planet Pharma
Job Title: Information SecurityComplianceAnalyst Location: Hertfordshire, UK (Hybrid) Contract: 12-Month Fixed Term (Salaried) Are you passionate about cybersecurity, compliance, and driving risk management strategies? We’re seeking an experienced Information SecurityComplianceAnalyst to join a dynamic team supporting the … development and maintenance of an EMEA-wide Information Security Management System. This role plays a critical part in maintaining ISO 27001:2022 certification, ensuring compliance with legislation including NIS 2, GDPR, and the AI Act, and promoting a strong security culture across the business. Requirements: ISO … Lead Implementer or Auditor certification (essential). Demonstrated experience in an Information Security or IT Governance role. Strong knowledge of frameworks like ISO 27001/27002, NIST, GDPR, and related standards. Proven ability to manage audits, compliance reporting, and security training programs. Excellent stakeholder management, communication, and More ❯
watford, hertfordshire, east anglia, united kingdom Hybrid / WFH Options
Planet Pharma
Job Title: Information SecurityComplianceAnalyst Location: Hertfordshire, UK (Hybrid) Contract: 12-Month Fixed Term (Salaried) Are you passionate about cybersecurity, compliance, and driving risk management strategies? We’re seeking an experienced Information SecurityComplianceAnalyst to join a dynamic team supporting the … development and maintenance of an EMEA-wide Information Security Management System. This role plays a critical part in maintaining ISO 27001:2022 certification, ensuring compliance with legislation including NIS 2, GDPR, and the AI Act, and promoting a strong security culture across the business. Requirements: ISO … Lead Implementer or Auditor certification (essential). Demonstrated experience in an Information Security or IT Governance role. Strong knowledge of frameworks like ISO 27001/27002, NIST, GDPR, and related standards. Proven ability to manage audits, compliance reporting, and security training programs. Excellent stakeholder management, communication, and More ❯
Global Security GRC Analyst (Governance, Risk, and Compliance) Join to apply for the Global Security GRC Analyst (Governance, Risk, and Compliance) role at Dentons . Dentons is designed to be different. We are driven to always be the firm of the future, challenge the … largest global law firm, with 12,000+ people across 80+ countries. Driven by diverse perspectives, we combine local knowledge with global insight. The Global Security GRC Analyst will operate across various operational security control domains to identify, track, and support the management of information security, physical … security, and business resilience risks and controls. The role involves working closely with decision-makers to develop, implement, and support effective security solutions and compliance measures for client security requirements and security risk aspects of the firm. Responsibilities Manage, review, and respond to client securityMore ❯
Southampton, Hampshire, United Kingdom Hybrid / WFH Options
NICE
Information SecurityAnalyst - Audit, Compliance & Cybersecurity United Kingdom - Southampton At NICE, we don't limit our challenges. We challenge our limits. Always. We're ambitious. We're game changers. And we play to win. We set the highest standards and execute beyond them. And if you're … we can offer you the ultimate career opportunity that will light a fire within you. So, what's the role all about? The Information SecurityAnalyst is primarily responsible for ensuring compliance with information security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, ISO … ISO 42001, GDPR, and DORA. This role focuses on internal audits, regulatory compliance, and readiness for external audits while also contributing to Cybersecurity Operations Center (CSOC) activities, including incident monitoring and response. How will you make an impact? Internal Audit Execution: Conduct internal audits to evaluate and enhance IT More ❯
Requisition: ST Title: Student Employee-Information Security & Compliance Office-Cybersecurity Analyst Employee Class: ST College Work Study Position: No Department: Information Security & Compliance Office Division: Information Technology Hours per week: 20 - 28 Hiring Rate: 11/hour Preferred Student Classification: All Nature & Purpose of Position … incident detection, analysis, and prevention. Vulnerability scans of networks and applications to assess effectiveness and identify weaknesses. Risk assessments, risk analysis, audits to ensure security compliance. Delivery of cybersecurity awareness training. Under direction of EIR Accessibility Coordinator, may assist with: Accessibility assessments Maintaining records for all EIR documentation and … effectively within department or work-group, throughout the university with professional or managerial staff, and with outside vendors. Under supervision: Ability to resolve complex security issues in diverse and decentralized environments; to plan, develop, monitor, and maintain cybersecurity and information technology security processes and controls; to communicate effectively. More ❯
Cybersecurity ComplianceAnalyst K2 Group is seeking a Cybersecurity ComplianceAnalyst to support the 557 th Weather Wing on Offutt AFB. This role will assist in aligning software systems with cybersecurity compliance requirements, providing analysis, remediation guidance, and documentation for Department of the Air Force … and AFLCMC standards. Duties: Develop and deliver artifacts required to meet AFLCMC cybersecurity and STIG compliance standards. Collaborate with software sustainment teams to assess application baselines against STIG checklists. Analyze and document findings in individual compliance reports for each software baseline. Provide expert recommendations for remediating non-compliant … software development practices Applying DISA STIGs to software systems Understanding and utilizing software development methodologies Hands-on experience with: Java or J2EE development Fortify security scanning tools CodeSonar static analysis tools DISA Application Security and Development STIG Must hold a DoD 8140.03-compliant certification: Information Assurance Technical Level More ❯
Hedge End, England, United Kingdom Hybrid / WFH Options
NICE
we can offer you the ultimate career opportunity that will light a fire within you. So, what's the role all about? The Information SecurityAnalyst is primarily responsible for ensuring compliance with information security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, ISO … ISO 42001, GDPR, and DORA. This role focuses on internal audits, regulatory compliance, and readiness for external audits while also contributing to Cybersecurity Operations Center (CSOC) activities, including incident monitoring and response. How will you make an impact? Internal Audit Execution: Conduct internal audits to evaluate and enhance IT … controls, compliance with standards, and risk management processes. Audit Preparation: Assist internal control owners in scoping appropriate evidence and preparing for external audits. Gap Assessments: Facilitate and/or conduct internal gap assessments and audit readiness evaluations for frameworks such as ISO 27001, GDPR, and DORA. Framework Tracking: Monitor More ❯
Southampton, England, United Kingdom Hybrid / WFH Options
NICE
we can offer you the ultimate career opportunity that will light a fire within you. So, what's the role all about? The Information SecurityAnalyst is primarily responsible for ensuring compliance with information security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, ISO … ISO 42001, GDPR, and DORA. This role focuses on internal audits, regulatory compliance, and readiness for external audits while also contributing to Cybersecurity Operations Center (CSOC) activities, including incident monitoring and response. How will you make an impact? Internal Audit Execution: Conduct internal audits to evaluate and enhance IT … controls, compliance with standards, and risk management processes. Audit Preparation: Assist internal control owners in scoping appropriate evidence and preparing for external audits. Gap Assessments: Facilitate and/or conduct internal gap assessments and audit readiness evaluations for frameworks such as ISO 27001, GDPR, and DORA. Framework Tracking: Monitor More ❯
ComplianceAnalyst Primary Responsibilities Support continuous upkeep, monitoring, analysis, and response to Information System, network and security events. Support NIPR and SIPR RMF packages for all enclaves within scope of the contract. Support documents compliance actions within the approved automated compliance tracking system Support system … operations in accordance with internal security policies and practices outlined in the System Security Plan (SSP), Standard Operating Procedures (SOP), and customer directives. Support records maintenance for workstations, servers, software, routers, firewalls, network switches, crypto, and other relevant hardware/equipment throughout the information system's life cycle. … Participates in internal/external security audits/inspections; supports risk assessments and Continuous Monitoring. Support development, implementation, and enforcement of Information Security Policies and Procedures. Support review and update IS Authorization documentation (Body of Evidence) to support IS Assessment and Authorization (Certification/Accreditation) activities. Required Qualifications More ❯
Ireland, Bedfordshire, United Kingdom Hybrid / WFH Options
Kraken
Krakenites are industry pioneers who develop premium crypto products for experienced traders, institutions, and newcomers to the space. Kraken is committed to industry-leading security , crypto education , and world-class client support through our products like Kraken Pro , Desktop , Wallet , and Kraken Futures . Become a Krakenite and build … the future of crypto! Proof of work The team Kraken's world-class security team is growing. As we continue to grow and mature our information technology controls program, we need someone with a strong information technology controls and external audit background to help build our program and tooling … for enterprise scale. This role will be reporting through Kraken's SecurityCompliance function. You will have the benefit of partnering with domain experts in our existing information technology audit program and enterprise infrastructure and technology stack, while still having the opportunity to come up with creative solutions More ❯
One Federal Solution is seeking a ComplianceAnalyst - Level IV to support the Department of State's Directorate of Defense Trade Controls (DDTC). This position provides high-level compliance support related to the Arms Export Control Act (AECA) and International Traffic in Arms Regulations (ITAR), including … interagency coordination. Required Qualifications: Bachelor's degree or a combination of post-high school education and over seven (7) years of experience in ITAR compliance or AECA/ITAR enforcement Strong written and verbal communication skills; writing samples may be requested Demonstrated ability to prioritize and manage multiple tasks … the ability to obtain a Top Secret or TS/SCI Key Responsibilities: Advise senior management and law enforcement on foreign policy and national security implications of compliance investigations Manage the registration process for exporters, manufacturers, and brokers under Parts 122 and 129 of the ITAR Oversee administrative More ❯
requires on-site presence within the Washington Metropolitan Area/National Capital Region. Job Summary: Acquisition Professionals LLC is seeking FIVE highly skilled ITAR ComplianceAnalyst - Level IV to support sensitive and complex compliance, registration, and enforcement activities under the International Traffic in Arms Regulations (ITAR) and … writing samples may be requested. Responsibilities: Provides expertise on special projects, advising senior management and law enforcement agencies on foreign policy issues and national security implications of administrative compliance investigations, criminal enforcement activities, and registration issues regarding parties involved in defense trade. Works to manage the registration of … ownership and control, and notices of changes submitted as required under 122.4 concerning foreign ownership and control. With input from senior staff, manages administrative compliance cases, enforcement procedures, and investigations and remedies, including facilitating administrative hearings to address civil charges involving export control violations and preparing consent agreements on More ❯
Why N-able N-able is seeking a Senior Security Risk Analyst for the Edinburgh office. Reporting to the Senior Manager of the GRC and CSO, you will identify risks and communicate clearly with cross-functional partners across products, offices, time zones, and corporate verticals. This role involves … formal assessments related to our security and privacy programs, as well as ad hoc projects. You will be part of a security team responsible for managing risk across the company, focusing on assessing and reporting on business, technology, and enterprise risks. The team provides independent assurance, proactively monitors … managing risks reviewed by our Risk Committee. Collaboration with multiple stakeholders to execute risk-related activities effectively is essential. An understanding of business processes, security frameworks, and technology risk management is crucial, along with the ability to analyze and synthesize data in a fast-paced environment. What You'll More ❯