Security Compliance Officer
Location: Hybrid - Essex
Sector: Software & IT Services
*NO SPONSORSHIP, MUST HAVE VALID RIGHT TO WORK*
A leading software and IT services company is seeking a Security Compliance Officer with IASME Cyber Essentials Auditor credentials to take ownership of their security compliance and certification activities across both internal systems and client environments.
This is a key hire within a growing technical organisation where cybersecurity assurance, governance, and compliance are increasingly central to customer delivery and commercial growth.
Key Responsibilities
*Lead and manage Cyber Essentials and Cyber Essentials Plus (CE+) assessments
*Maintain and improve compliance with key frameworks including ISO 27001, GDPR, and internal security policies
*Conduct internal security audits, control reviews, and risk assessments
*Support evidence collection and audit readiness across technical teams
*Work closely with IT support, DevOps, and engineering teams to ensure security controls are implemented and maintained
*Handle client-facing security questionnaires and compliance requirements
*Assist in improving the organisation’s overall security posture and governance framework
Required Experience
*IASME Cyber Essentials Assessor/Auditor qualification (essential)
*Strong understanding of Cyber Essentials / Cyber Essentials Plus requirements
*Experience in information security, compliance, GRC, or IT security roles
*Familiarity with ISO 27001 or similar security frameworks
*Experience working with technical teams (MSP, software, or IT environments preferred)
Desirable
*ISO 27001 Lead Auditor or Implementation experience
*CISSP, CISM, CISA or equivalent certifications
*Experience within MSP, SaaS, or software delivery environments
*Exposure to client-facing compliance or consultancy work
What’s on Offer
*Hybrid working (Essex-based office with flexibility)
*Opportunity to own and shape security compliance in a growing technical business
*Exposure to both internal security operations and external client compliance requirements
*Strong career progression into GRC, Security Manager, or Head of Compliance roles
This is an excellent opportunity for a compliance professional who enjoys combining structured security frameworks with hands-on collaboration across technical teams in a fast-paced software environment.