Senior Cybersecurity & Compliance Specialist

Quick Facts

• Role: Senior Cybersecurity & Compliance Specialist

Description

In this role, you will strengthen and continuously improve the organization’s cybersecurity posture by combining hands-on security, risk management, compliance, and stakeholder engagement. You will develop security architecture and policies, manage cyber risk and vulnerability remediation, support incident response, and report security status to leadership. You will also support ISMS continuous improvement, access management, and security awareness initiatives.

Responsibilities

• Develop and enhance the organization’s IT security architecture

• Manage security risks, maintain the IT risk register, and recommend actions to leadership

• Coordinate and support security incident response and post-incident reporting

• Lead vulnerability management, including risk assessment and remediation oversight

• Develop, review, and implement security policies, procedures, and standards

• Support access management, including oversight of Active Directory, privileged accounts, and MFA controls

• Assess the security of new systems, applications, and technology changes

• Prepare regular and ad hoc cybersecurity reports for management

• Deliver security awareness training and educational initiatives

• Collaborate with external partners, CSIRTs, regulators, and cybersecurity institutions

• Support business continuity activities and continuous improvement of the ISMS

Requirements

• Several years of experience in IT Security, Cybersecurity, or Security Compliance

• Practical experience in security risk management and incident handling

• Knowledge of vulnerability management processes

• Familiarity with cybersecurity regulations including UKSC, NIS2, and GDPR

• Knowledge of security standards such as ISO/IEC 27001 and ISO 22301

• Experience with access and identity management in Active Directory environments

• Ability to create security documentation, policies, analyses, and management reports

• Strong analytical thinking and risk assessment skills

• Ability to independently drive initiatives from identification to implementation

• Excellent communication and stakeholder management skills

Benefits

• Opportunity to shape cybersecurity strategy and security maturity

• High ownership, autonomy, and impact

• Participation in cybersecurity, compliance, and IT transformation initiatives

• Close collaboration with IT, business teams, and senior leadership

• Professional development with support for certifications and continuous learning

• Exposure to real-world cybersecurity and risk management challenges

• Competitive compensation, benefits, and flexible working arrangements