hackajob Coventry, England, United Kingdom

Senior Compliance Analyst

hackajob Coventry, England, United Kingdom

3 days ago Be among the first 25 applicants

hackajob is collaborating with Sainsbury's DTD to connect them with exceptional tech professionals for this role.

We’d all like amazing work to do, and real work-life balance. That’s waiting for you at Sainsbury’s. Think about the scale it takes for us to feed the nation. The level of data, transactions and variety it involves. Then you’ll realise that ours is a modern software engineering environment because it has to be. We’ve made serious investment into a Tech Academy and into setting standards and principles. We iterate, learn, experiment and push ways of working such as Agile, Scrum and XP. So you can look forward to awesome opportunities in everything from AI to reusable tech.

Role Profile

Senior Compliance Analyst

Division/Dept.

Data Governance and Information Security

Location

Hybrid working with base location of Coventry or London

Reporting to

Security Compliance and Culture - Compliance Manager

In a nutshell

As a Senior Compliance Analyst, you’ll play a key role in driving the compliance assurance programme and will be responsible for delivering the annual NIST-CSF maturity assessment, driving continuous maturity and improvement; and you'll support the delivery of operational effectiveness testing of IT general controls.

You’ll be responsible for defining the security testing roadmap, and communicating this with key stakeholders and senior management, as well as reporting on key outputs and remediation activities. Additionally, you’ll recommend and drive process enhancements across key control areas, whilst seeking out opportunities to drive compliance activities that support the broader compliance strategy.

What You Need To Do

• Responsible for delivering the internal annual NIST-CSF maturity programme
• Own and co-ordinate the security testing roadmap, and provide key support to the overall Compliance strategy
• Manage the annual NIST-CSF assessment testing schedule
• Support and drive the annual IT General Controls assurance programme, and test and evaluate the IT Applications Controls within financial processes
• Deliver key reporting on compliance activities to key stakeholders, and produce packs for the audit committee and data governance committee
• Drive and own the continuous assessment of security and technology control effectiveness across the business, raising appropriate risks or defining remediation requirements
• Responsible for driving remediation plans across the business to improve maturity and reduce risk, whilst reporting on results to key stakeholders and senior management
• Own and drive improvements to process and documentation, to support controls testing and implementation of policy requirements
• Responsible for ensuring the integrity and efficiency of audit records and compliance activity
• Drive the DNS, Domains and SSL programme and support overall project where necessary
• Responsible for managing purchase orders, invoicing and receipts ensuring these are raised correctly and in a timely manner
• Be the liaison and maintain a good relationship with Finance to drive resolutions to any issues
  
  

• Ability to collaborate effectively with other teams and stakeholders, to drive the wider agenda
• You’ll have demonstrable experience of delivering an assurance testing programme across industry frameworks and regulations, NIST-CSF, and IT General Controls desirable
• Be highly organised and able to coordinate expected outputs from different stakeholders
• Familiar with key techniques and industry frameworks/regulations such as NIST-CSF, ISO27001, PCI-DSS, GDPR, and IT General Controls
• Pro-active with upcoming industry changes and ability to implement where necessary
• Be able to proactively identify and own any issues, and follows through to resolve them
• Ability to prioritise their own workload and deliver quality results in line with the wider compliance strategy
• Someone with the ability to think methodically and logically, and communicate well using spoken and written word
  
  

• Your line manager will provide support and guidance
• Access to the ITGC, GRC, Data Governance and Infosec teams who have a wide array of skills and knowledge
• Extensive support and training materials available relating to NIST, IT General Controls, PCI-DSS and GDPR
• Other resources as required
  
  

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Legal

• Industries

  Software Development

Referrals increase your chances of interviewing at hackajob by 2x

Sign in to set job alerts for “Senior Compliance Analyst” roles.

Continue with Google Continue with Google

Continue with Google Continue with Google

Birmingham, England, United Kingdom 1 day ago

Birmingham, England, United Kingdom 9 months ago

West Midlands, England, United Kingdom 2 days ago

Aldridge, England, United Kingdom 1 week ago

West Midlands, England, United Kingdom 1 week ago

Bromsgrove, England, United Kingdom 2 weeks ago

Royal Sutton Coldfield, England, United Kingdom 4 days ago

Global Anti-Corruption and Financial Crimes Compliance Senior Manager - Anti-Money Laundering

Royal Sutton Coldfield, England, United Kingdom 3 weeks ago

Compliance Review Officer, GET STAFFED ONLINE RECRUITMENT LIMITED

Corporate/Compliance Senior Legal Counsel

Warwickshire, England, United Kingdom £98,000 - £118,000 3 weeks ago

Birmingham, England, United Kingdom 1 week ago

Leicester, England, United Kingdom 3 weeks ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.