Security Compliance Analyst

About the role

SD Worx is seeking a Security Compliance Analyst to join its international Risk & Security team. You will help manage and improve the information security management system across the group, ensuring the protection of personal data for millions of users.

Key responsibilities

• Conduct information security risk assessments and comprehensive gap analyses.
• Monitor and enhance the maturity of the information security management system.
• Follow up on open risk treatment plans and support external audit coordination.
• Collaborate with internal and external stakeholders to demonstrate security domain knowledge.
• Respond to security queries from customers and internal teams.
• Build and maintain security metrics for the enterprise security program.
• Deliver security and privacy training across the organisation.
• Administer corporate phishing test campaigns and conduct awareness sessions.
• Review and propose updates to security policies in line with emerging trends.

Required profile

• Degree in Information Technology, Cyber Security, Computer Science or related field.
• Minimum 4 years of relevant experience, preferably in financial services or consulting.
• Experience conducting information security reviews or internal audits.
• Familiarity with ISO 27001/2, NIST Cybersecurity Framework and CIS Critical Security Controls.
• ISO 27001 Lead Implementer or Auditor certification is a plus.

Required skills

• ISO 27001
• NIST Cybersecurity Framework
• CIS Critical Security Controls