Cyber Security Compliance Officer
UK Visa Sponsorship Analytics
Above analytics are generated algorithmically based on job titles and may not always be the same as the company's job classification. You can also check detailed occupation eligibility, and salary criteria on our UK Visa Eligible Occupations & Salary Thresholds page.
Disclaimer: Hunt UK Visa Sponsors aggregates job listings from publicly available sources, such as search engines, to assist with your job hunting. We do not claim affiliation with Investigo. For the most up-to-date job details, please visit the official website by clicking "Apply Now."
Cyber Security Compliance Officer
York | Hybrid (2 days a week in the office)
£55,000
Let’s get something out of the way.
This isn’t a role about writing policies that nobody reads, or running audits for the sake of ticking boxes.
We’re looking for a Security Compliance Officer for one of our clients who understands that good compliance is really about good security - and that the best controls are the ones people actually follow.
You’ll be part of the Cyber Security Operations team, working closely with IT and the wider business to turn frameworks, regulations and policies into practical, everyday ways of working.
The Role (What This Job Is Really About)
Your job is to make sure their security obligations don’t live in spreadsheets and PDFs - they live in how they actually operate.
You’ll design and maintain security compliance processes, support risk management and audits, and act as the bridge between security, IT and business teams.
You’ll help people understand what’s required, why it matters, and how to do it properly.
What You’ll Be Doing:
Security governance & compliance
- Designing and maintaining security compliance processes across IT and the wider business.
- Aligning controls with recognised standards and frameworks (ISO 27001/27002, NIST, CIS, Cyber Essentials, GDPR, and others).
- Owning and maintaining security policies, standards, procedures and guidance.
- Monitoring compliance with internal policies and external regulatory requirements.
Risk management
- Supporting information security risk assessments and risk treatment plans.
- Maintaining risk registers and tracking remediation activities.
Audit & assurance
- Planning and coordinating internal security audits and control reviews.
- Supporting external audits, certifications and customer assurance requests.
- Tracking audit findings and making sure they’re fixed - not forgotten.
- Producing evidence packs and clear compliance reporting for stakeholders.
What We’re Looking For:
You’ll need:
- Experience in a security compliance, GRC or information security governance role.
- A strong understanding of security standards and regulatory frameworks.
- Experience designing and implementing security policies and compliance processes.
- Familiarity with audits, evidence collection and assurance activities.
- The ability to translate regulations into controls that actually work.
- Strong documentation skills and the confidence to engage stakeholders.
- A high level of attention to detail and organisation.
Nice to have (but not essential):
- Experience working alongside Security Operations or IT Operations teams.
- Knowledge of cloud security compliance (Azure or similar platforms).
- Experience with third-party risk management.
- Familiarity with UK GDPR and data protection.
- Experience using GRC tools.
If you care about doing compliance properly, want to make security easier for people to get right, and like working at the intersection of security, IT and the business - this is a role where you’ll genuinely make a difference.
Interested? Let’s talk.