Security/Privacy Analyst – AI Infrastructure

Join a premier UK-based cloud and infrastructure provider with over two decades of experience delivering AI‑ready environments and secure digital transformation through its elite NVIDIA Cloud Partner capabilities. This security analyst role offers the chance to act as a vital link between technical operations and regulatory compliance, reporting directly to the Director of Information Security. The successful candidate will maintain a robust security posture by managing alerts and vulnerability remediation while playing a key part in achieving high‑level ISO 27001 and SOC 2 audit standards.

Responsibilities

• Daily management of alerts and reports across key tools (including cloud‑based security consoles and SIEM platforms).
• Monitor system vulnerabilities and coordinate remediation efforts with operations teams.
• CSupport internal and external audits, including SOC 2 and ISO 27001, by collecting evidence and tracking control validation.
• Attend Change Advisory Board (CAB) meetings, conduct technical risk reviews of vendors, and maintain the main information security risk register.
• Create and manage Data Protection Impact Assessments (DPIAs) and maintain the Record of Processing Activities (RoPA) database to ensure GDPR alignment.
• Conduct basic internal penetration testing and support the maintenance of the Information Security Management System (ISMS).

Skills / Must have

• Must have experience in a linux environment
• Experience: 2 to 3 years of proven experience in a Security, Compliance, or Privacy Analyst role.
• Frameworks: Strong working knowledge of SOC 2 and ISO/IEC 27001 frameworks.
• Regulatory Knowledge: Solid understanding of GDPR and UK data protection regulations.
• Technical Proficiency: Experience managing DPIAs and RoPA documentation, alongside familiarity with security monitoring tools and SIEM platforms.
• Cloud Experience: Practical experience working in cloud environments, specifically Google Cloud Platform.
• Communication: Exceptional organisational skills and the ability to interpret risks in a practical, business‑focused way for both technical and non‑technical teams.

Desirable Skills

• Education: BA Hons degree in a relevant field.
• Certifications: ISO 27001 Lead Implementer/Auditor, CISM, CISSP, or equivalent.
• Tools: Exposure to penetration testing methodologies and vulnerability scanning tools.
• Growth: Experience supporting audits within a fast‑paced or scaling organisation.

Salary

• Up To £50,000

#J-18808-Ljbffr…