Security and Compliance Analyst

In this role you strengthen the theatre’s cyber resilience by running the audit and compliance programme, evidencing the effectiveness of security controls, and coordinating remediation with platform owners. You will provide second-line support for security tickets and liaise with internal audit to ensure timely remediation and clear reporting. You’ll work closely with the IT team and Head of Cyber Security to translate technical findings into actionable outcomes for stakeholders. This is a chance to shape security posture in a high-profile cultural organisation.

• Run day-to-day audit and compliance programme
• Coordinate vulnerability remediation with platform owners
• Evidence effectiveness of technical controls (identity, endpoint, cloud)
• Provide second-line support for security tickets escalated by Helpdesk
• Liaise with internal audit, producing reports, evidence and status updates
• Ensure audit requirements are met and findings addressed in a timely, transparent manner

• Significant demonstrable experience in security, IT audit, compliance or technical IT role
• Methodical, well-organised with strong documentation habits
• Clear written and verbal communication; able to translate technical findings for non-technical stakeholders
• Understanding of how cyber security risk is identified, assessed and managed
• Practical experience of audit and compliance work against recognised security framework (CAF, ISO 27001, Cyber Essentials Plus)

• Strong written and verbal communication
• Methodical and well-organised
• Willingness to ask questions and learn quickly
• Audit and compliance work against CAF, ISO 27001, Cyber Essentials Plus
• Evidence and controls across identity, endpoint, and cloud environments
• Understanding of translating findings into practical controls and evidence