IT Security and Compliance Analyst

Holman

IT Security & Compliance Analyst supporting compliance evaluations and information security in the automotive sector. Collaborating across teams and ensuring regulatory adherence at Holman UK.

Posted 6/30/2026full-timeBirmingham • 🇬🇧 United KingdomMid-LevelSenior💰 £55,000 - £60,000 per yearWebsite

About the role

Key responsibilities & impact

Works with fellow team members and other departments to address customer assurance requests, preparing responses to customer inquiries.
Work with senior managers across the business to drive the information security agenda and ensure that it meets complex compliance requirements.
Works closely with Senior Analysts supporting compliance, regulatory, vendor and cyber-maturity assessments and reporting.
Provides direct support for control activities such as access reviews, data mapping and vendor assessment.
Works toward, establishes, and maintains a firm knowledge of data security practices and relevant regulatory requirements.
Assist with the development of control frameworks to meet business and regulatory requirements
Participates in project reviews, working with business representatives, technical staff, suppliers, and project team members to evaluate information security requirements, and to help mitigate potential exposures.
Provides support for contract review and negotiation of information security and privacy requirements.
Monitors and promotes compliance with information security policies and standards.
Recommends changes to policies, standards and procedures.
Consult with IT colleagues to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
Supports UK DPO in providing technical expertise in relation to UK GDPR, Data Protection Act 2018 and PECR 2003.

Requirements

What you’ll need

Ideally at least one industry certification (e.g. CISA, CISM, CRISC, CISSP, ISAAP)
5 years of combined Information Security and Technical Administration Experience.
Proven experience in an information security role including experience of developing Information Security policies and plans.
Working knowledge of General Data Protection Regulation (GDPR).
Experience with information security internal & external audits and contract compliance.
Good understanding of system technology security testing (vulnerability scanning and penetration testing).
Excellent understanding of information security concepts, protocols, industry best practices and strategies.
Knowledge of information security & control frameworks e.g., NIST, ISO 27001/27002 a plus.
Familiarity with regulatory and compliance mandates e.g., PCI, CCPA, GDPR a plus
Proficient with Microsoft Office suite of products.
Sound analytical judgement, self-motivated, attention to detail, ability to manage deliverables against firm timelines, and commitment to producing results.
Strong verbal and written communication skills.

Benefits

Comp & perks

Health Insurance
Dental Insurance
Life and Disability Insurance
Flexible Spending and Health Savings Accounts
Employee Assistance Program
Retirement Plan
Paid Time Off
Tuition Reimbursement

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Information SecurityTechnical AdministrationVulnerability ScanningPenetration TestingData MappingAccess ReviewsContract ComplianceRegulatory ComplianceCyber-Maturity AssessmentsInformation Security Concepts

Soft Skills

Analytical JudgementAttention to DetailSelf-MotivationStrong Communication Skills

Certifications

CISACISMCRISCCISSPISAAP