Compliance Specialist

We are looking for a proactive, technically minded, and organised Compliance Specialist to join our Information Security team. Reporting to the Information Security Manager, you will assist with the continued success of Benefex ISO 27001, 22301 and data protection compliance requirements.

You will be involved in a variety of work, all aimed at keeping our customer data secure. Unlike typical security roles, there is a heavy focus here on compliance duties, such as providing answers to assessments, conducting due diligence, and assisting with audit requirements. However, there will be security duties, such as investigating data loss prevention alerts, assisting with incident investigations, and coordinating penetration test results with the necessary stakeholders.

As our customer base continues to expand across global regions, we need to ensure that the compliance information we provide is accurate, reviewed and maintained in line with local and global legislative changes or events. In this role, you will be focused on maintaining our International and UK security and continuity standards.

**Your main duties will include**:

- Assisting in the day-to-day management of customer information requests.
- Assisting in the updates to our security and business continuity standards.
- Assisting with internal audits, external audits with our certification body and where required customer audits
- Assisting with due diligence and compliance questionnaires received from potential and existing customers.
- Assisting in regular reviews of our suppliers and benefit providers to ensure they meet our expected security standards.
- Assisting in the investigation and reporting of compliance incidents.
- Assisting in the coordination of penetration test results with the necessary stakeholders.
- The ability to quickly learn and understand our internal IT and customer platform infrastructure to enable clear and concise communication with our customer base where required.

**Who should apply?**
- An interest in information technology and associated compliance methods; you do not need any formal information technology, security, or data protection qualifications, as these can be obtained as part of your career development.
- Your Information technology knowledge should have a basic understanding of networks and office IT environments.
- Your Information technology understanding enables you to think about and provide solutions to problems.
- You can read and interpret technical requirements, regulation, and procedures.
- You can answer technical and/or compliance questions at customer remote or face-to-face meetings.
- You wish to contribute to the continued success of our security programme and ISO certifications.
- You are comfortable interacting with technical and non-technical stakeholders, including senior management and customers.
- You can communicate technical information in a way that others can easily understand.
- You can support without question the principles of our security posture.
- You must be discrete when working with confidential matters associated with HR, Internal and customer incidents and will be required to sign an additional non-disclosure agreement

**Rewards for you**:

- Benefits including 25 days' holiday (plus your birthday off)
- 2 paid half days for you to take ‘Time for You’ to look after your own wellbeing
- Employer funded Healthcare Cash Plan, Income Protection, Life Assurance and Employee Assistance Programme
- Access to our own award-winning online benefits scheme where you can select additional flexible benefits i.e., car leasing, dental insurance, technology vouchers, holiday trading (sell or buy up to 5 days) and many more
- Great team and office environment

**Job Types**: Full-time, Permanent

**Salary**: £25,000.00-£27,000.00 per year

**Benefits**:

- Additional leave
- Casual dress
- Company events
- Cycle to work scheme
- Life insurance
- Referral programme
- Sick pay

Schedule:

- Monday to Friday

Ability to commute/relocate:

- Southampton: reliably commute or plan to relocate before starting work (required)

Work Location: Hybrid remote in Southampton