Information Security & Compliance Specialist

About the role

This 12‑month fixed‑term position supports a large organisation undergoing a major technology transformation. The role focuses on governance, risk, compliance and data protection, ensuring new projects, systems and third‑party relationships meet security and regulatory standards.

Key responsibilities

• Support security governance frameworks, policies and standards.
• Conduct risk, compliance and third‑party assessments.
• Assist with audits, remediation activities and compliance reporting.
• Maintain risk registers, control reviews and governance processes.
• Perform cyber risk assessments and define security requirements for projects.
• Assess supplier and vendor security risks.
• Support compliance with standards such as ISO 27001, NIST, GDPR, PCI DSS and NIS2.
• Support privacy compliance activities, including impact assessments and incident management.
• Assist with regulatory engagement, audits and evidence reviews.
• Contribute to supplier assurance, security awareness and governance reporting.
• Maintain policies, procedures and compliance documentation.
• Provide guidance to stakeholders on security and data protection matters.

Required profile

• Relevant qualification or certification in Information Security, Privacy, Risk or Compliance (e.g., CISSP, CIPP, IAPP or equivalent).
• Experience in IT risk, cybersecurity, compliance, data protection or related disciplines.
• Knowledge of security frameworks and regulations such as GDPR, ISO 27001, NIS2 and AI governance requirements.
• Strong stakeholder management, communication, analytical and problem‑solving skills.
• Ability to manage confidential information and work independently.

Required skills

• CISSP
• CIPP
• IAPP
• ISO 27001
• NIST
• GDPR
• PCI DSS
• NIS2