Information Security Compliance Specialist at Netcraft focusing on security and compliance programs. Collaborating with teams for audits, vendor reviews, and customer assurance while maintaining high standards.
Responsibilities
Help demonstrate, maintain, and continuously improve security and compliance programmes
Support customer and prospect security reviews, including questionnaires, due diligence requests, and assurance documentation
Assist with RFP and tender responses, focusing on information security, privacy, and risk
Maintain Netcraft’s library of standard responses and supporting evidence
Help maintain and improve the Netcraft Compliance Hub and Trust Centre
Assist the Compliance Manager maintain security policies, processes, and customer facing security documentation
Track key compliance actions, deadlines, and metrics
Support vendor onboarding and third-party security reviews
Support audit readiness and certifications such as SOC 2 Type II and Cyber Essentials
Requirements
Experience or strong working knowledge in information security, compliance, assurance, or risk
Familiarity with security frameworks such as SOC 2 and Cyber Essentials
Strong written communication skills, with the ability to explain security concepts clearly and accurately
Strong organisational skills and attention to detail, comfortable managing multiple deadlines
Technical curiosity and a willingness to learn and develop
Nice to have: Experience supporting compliance and assurance activities in a technology, SaaS, or regulated environment
Nice to have: Exposure to customer, partner, or internal assurance processes (e.g., procurement reviews, questionnaires, RFPs, tenders, audits, or risk assessments)
Nice to have: Knowledge of third party, risk management, or vendor onboarding controls (including tracking actions and follow-ups)
Nice to have: Awareness of privacy and data protection concepts, such as GDPR
Benefits
Hybrid and flexible working options
33 days holiday per annum (incl. public holidays)
Salary sacrifice pension with matched employer contributions up to 5% + NI savings
Private health cover, including access to a private GP service
Spot reward bonus scheme to reward truly outstanding contributions
Information Systems Security Engineer providing technical solutions and support for Department of Defense systems. Leveraging industry knowledge to increase operational efficiencies focusing on classified data systems.
Network Security Architect at Dell influencing security culture and designing secure network environments. Collaborating across teams and developing strategies for modern network security.
Senior Enterprise Security Engineer performing security assessments and threat modeling for Salesforce systems. Collaborating with teams and defining security standards across diverse technology environments.
Fullstack Software Engineer focusing on security to ensure resilience and data protection at health tech company Alan. Involved in building foundational security and authentication systems.
Security Engineer building trust foundations for bare - metal platforms at OpenAI. Designing and operating core security infrastructure for reliable compute platforms across global infrastructure.
Cybersecurity Consultant involved in deploying security tools and supporting compliance projects in Andorra. Working with cross - functional teams to enhance cybersecurity measures and documentation.
Microsoft Success Manager helping partners grow secure, scalable Microsoft practices across ANZ. Championing Microsoft security solutions and supporting partner success strategies in the region.
Assistant AVP overseeing a 5 - member team for Access Management services in Pune and Mumbai, ensuring high standards of service delivery and compliance.
Own global security systems infrastructure for QVC, managing access control and networked security systems across multiple regions. Collaborate with IT to ensure security and technology initiatives meet organizational needs.
Sales Account Manager growing ADAPTIT Cybersecurity business in Greece and Cyprus. Responsible for client relations, sales pipeline, and collaboration with the cybersecurity team.