TL;DR
Key Takeaways
- Gain practical experience in Information Security, Risk Management, Governance, or Compliance.
- Support security and compliance programmes aligned with ISO 27001, SOC 2, and Experian standards.
- Requires a degree or qualification in Cyber Security, IT, or Computer Science.
- Hybrid working model with 40% office-based requirement.
- Competitive compensation package with a discretionary bonus and comprehensive benefits.
About the Role
This entry-level role offers exposure across security governance, risk management, compliance, auditing, and security assurance.
Reporting into the Information Security Manager, you will work with colleagues, customers, auditors, and partners across multiple regions. You will help support and improve EDQ's security and compliance programmes, ensuring alignment with ISO 27001, SOC 2, Experian security standards, and regulatory requirements.
Key Responsibilities
- Support the ongoing maintenance and improvement of EDQ's Information Security Management System (ISMS).
- Assist with compliance activities relating to ISO 27001, SOC 2, Experian security standards, and regulatory requirements.
- Support internal, external, customer, and certification audits, including tracking remediation activities.
- Monitor security risks, vulnerabilities, and remediation progress across the business.
- Help maintain security metrics, reporting, and risk registers to support informed decision making.
- Contribute to security governance activities, meetings, and continuous improvement initiatives.
- Partner with business stakeholders to support security assessments, projects, and compliance enquiries.
- Promote security awareness and communicate security risks, requirements, and best practices to both technical and non-technical audiences.
Qualifications
Essential
- A genuine interest in Information Security, Risk Management, Governance, or Compliance.
- A degree or qualification in Cyber Security, Information Technology, Computer Science.
- Awareness of security frameworks and standards such as ISO 27001, NIST, or Cyber Essentials.
- An understanding of information security concepts and cyber security best practices.
- Strong analytical, problem-solving, and organisational skills.
- Excellent communication skills, with the ability to explain technical concepts clearly to non-technical audiences.
- Strong stakeholder management skills and the confidence to build relationships across different teams and levels of the organisation.
- A proactive approach to learning and developing knowledge of security frameworks, standards, and regulations.
Desirable
- Awareness of Information Security, Risk, Compliance, Audit, or Governance activities and a willingness to develop a career in Information Security
Benefits
- Hybrid working - 40% office based
- Great compensation package and discretionary bonus
- Core benefits include Pension, Bupa healthcare, Sharesave Scheme and more
- 25 days annual leave with 8 bank holidays and 3 volunteering days. You can purchase additional annual leave.