Junior Compliance Analyst

Natterbox

. Collect and organise technical control evidence across ISO 27001, HIPAA, and PCI DSS frameworks .

Posted 10/9/2026full-timeRemote • United KingdomJunior💰 £28,000 - £32,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in collecting and organizing technical compliance evidence across ISO 27001, HIPAA, and PCI DSS frameworks, while effectively communicating complex security concepts to diverse teams. Proficient in maintaining governance records and supporting compliance initiatives with a strong analytical mindset.

Highest-signal resume keywords

ISO 27001 ComplianceHIPAA CompliancePCI DSS ComplianceTechnical DocumentationData Protection Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Technical Control Evidence CollectionVulnerability Remediation TrackingPenetration Testing CoordinationUser Access Review CoordinationIncident Detail CaptureRisk Register MaintenanceCloud Governance UnderstandingInformation Security PrinciplesCompliance Evidence OrganizationAudit-Ready Documentation

Soft Skills

Effective CommunicationExceptional OrganizationAnalytical MindsetRelationship BuildingContinuous Learning

Tools & Technologies

ConfluenceSharePoint

Certifications & Qualifications

Data Protection CertificationCybersecurity CertificationLaw/GRC Certification

Industry Keywords

ComplianceTechnical Security IncidentsGovernance RecordsRegulatory ReportingSecurity Training

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Collect and organise technical control evidence across ISO 27001, HIPAA, and PCI DSS frameworks
Liaise with internal technical teams to track vulnerability remediations
Schedule periodic penetration testing
Coordinate regular user access reviews
Assist with customer security questionnaires, vendor assessments, and technical RFI documents
Support the compliance team during technical security incidents by capturing technical details
Feed incident details into data breach assessment workflows and regulatory reporting timelines
Maintain governance records, administrative filings, risk registers, and standard operating procedures
Support the rollout of internal security training
Work closely with the Head of Compliance & Regulatory to translate platform architectures, technical controls, and operational processes into audit-ready compliance evidence

Requirements

What you’ll need

Ability to communicate effectively with technical software engineers and translate complex technical security concepts into clear, formal compliance documentation
Exceptional organisation, documentation, and record-keeping skills with an analytical mindset
Ability to build positive working relationships across internal business, technical, and compliance teams
Desire to continuously learn and develop hands-on exposure across information security, data protection, and cloud governance frameworks
A formal qualification such as a degree, diploma, or certification in Data Protection, Cybersecurity, Law/GRC, or demonstrable equivalent practical experience in a similar role
Foundational, structured understanding of IT systems, information security principles, and cloud architectures
Direct experience or a clear understanding of collecting, verifying, and organising technical compliance evidence within repositories such as Confluence or SharePoint
Permanent Right to Work in the UK
Must not require visa sponsorship

Benefits

Comp & perks

25 days holiday increasing to 30 days after 2 years (plus bank holidays)
Access to Perkbox, including retail discounts, wellness perks, and monthly freebies
Auto enrol pension
Private Health care after probation