Senior Information Security & Compliance Analyst

Senior Information Security & Compliance Analyst Greater Manchester | Hybrid Working £55,000 - £65,000 + Excellent Benefits We're partnering with a leading organisation in the UK water and infrastructure sector to appoint a Senior Information Security & Compliance Analyst. This is an excellent opportunity for an information security, governance, risk or privacy professional looking to take on a highly visible role within a business supporting Critical National Infrastructure projects across the UK. Working closely with the Information Security & Compliance Manager, you'll help drive information security, privacy and compliance activities whilst supporting the company's journey towards ISO 27001 certification. The Role You'll act as a trusted adviser to stakeholders across the business, helping ensure robust security, privacy and governance controls are embedded into day-to-day operations. Key responsibilities include: Supporting the organisation's ISO 27001 programme and compliance activitiesConducting risk assessments and maintaining security risk registersReviewing suppliers and third-party security risksSupporting security incident management and investigationsAssisting with business continuity and resilience activitiesDeveloping and maintaining security policies and guidanceSupporting audits, regulatory reviews and client assurance requestsActing as Deputy Data Protection Officer when requiredMaintaining Records of Processing Activities (RoPA)Supporting DSAR responses and privacy investigationsProviding security and privacy advice to stakeholders across the business About You We're keen to speak with professionals who have experience in information security, governance, risk, compliance or data protection roles. You'll ideally bring: Experience supporting information security or compliance programmesKnowledge of ISO 27001, NIST or similar frameworksUnderstanding of UK GDPR and Data Protection legislationExperience conducting risk assessments and managing compliance activitiesStrong stakeholder engagement and communication skillsExperience working within regulated or data-sensitive environments Desirable ISO 27001 Internal Auditor certificationSecurity+, CISM, CIPP or CIPM qualificationsBusiness Continuity experienceCritical National Infrastructure, utilities or infrastructure sector experienceKnowledge of DLP, records retention or supplier assurance processes What's On Offer? £55,000 - £65,000 salaryHybrid workingCar allowance (role dependent)25 days annual leave plus bank holidaysOption to purchase additional holidayPension schemeLife assuranceHealth insurancePrivate medical insuranceCycle to work schemeRetail and lifestyle discountsOngoing professional development opportunities Why Apply? This role offers the chance to play a key role in shaping information security, privacy and governance within an organisation delivering nationally important infrastructure projects. If you're looking for a position that combines Information Security, ISO 27001, Risk Management, GDPR and Compliance within a supportive and growing business, click apply or reach out to Matthew.Lannen@infosecpeople.co.uk for more information.