- Company Name
- Hays
- Job Title
- Information Security Analyst
- Job Description
-
Job title: Information Security Analyst
Role Summary:
Support the development and continuous improvement of the global information security compliance program, ensuring adherence to corporate policies and international regulatory frameworks (ISO 27001, NIST, SOX, GDPR, SOC 2, HIPAA, CCPA, LGPD, etc.). Execute audits, risk assessments, and due‑diligence reviews while maintaining up‑to‑date policies and documenting changes in regulations.
Expactations:
- UK National or holder of Settled Status, eligible for SC clearance.
- Clean current driving licence; occasional travel required.
- Proactive, detail‑oriented, and able to translate complex regulatory requirements into actionable controls.
Key Responsibilities:
- Execute and enhance global information security compliance program.
- Conduct internal audits, third‑party risk assessments, and due‑diligence reviews.
- Maintain alignment with ISO 27001, NIST, SOX, GDPR, SOC 2, HIPAA, CCPA, LGPD and related standards.
- Collaborate with cross‑functional teams across multiple jurisdictions.
- Identify gaps in security controls and recommend corrective actions.
- Update security policies, procedures, and documentation.
- Monitor regulatory changes and assess impact on business operations.
Required Skills:
- Proven experience in information security compliance, risk management, and audit.
- Hands‑on knowledge of ISO 27001 audits, GDPR compliance, NIST framework, SOX, SOC 2, HIPAA, CCPA, LGPD.
- Ability to interpret complex regulatory requirements and convert them into controls.
- Strong analytical, problem‑solving, and stakeholder‑engagement skills.
- Excellent communication and documentation abilities.
Required Education & Certifications:
- Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience).
- Professional certifications preferred: CISSP, CISA, ISO 27001 Lead Auditor, or similar.
West midlands, United kingdom
Hybrid
13-03-2026