We're looking for a second-line analyst to support implementation and audit preparation. You'll independently assess documentation and implementation evidence against guidance.
What you'll do
- Review evidence submitted by first-line domain owners.
- Verify that evidence supports scores without relying on assumptions.
- Give domain owners concrete feedback on gaps and improvements.
- Build audit-ready dossiers with an evidence register.
- Prepare evidence for the Important and Essential levels.
What you bring
- 3 to 6 years' experience in , compliance or IT audit.
- Familiarity with control frameworks such as , ISO 27001 and .
- Ability to assess configuration exports, logs, tickets, recovery reports and scan reports.
- A critical, analytical and independent approach.
- (native).
- .
Good to know
- No operational , SOC activities or engineering.
- You report to the CISO, with support on methodology and escalation.
What's next?
The people who do well here are the ones who saw themselves in this description. Not because they match every line, but because the mission felt right for them.
We are actively hiring for this position. Applications are reviewed by our team, and matching profiles receive a call to discuss the role in detail.
It takes under a minute to apply. Your email, your CV. That is all we need to start the conversation.