Cyber Governance Analyst

Lanes Group Ltd is a leading nationwide utility services provider with c.5000 dedicated employees. Our diverse subsidiaries drive our success across various sectors, contributing to a remarkable turnover of over £650 million. We are committed to excellence and innovation, ensuring we provide industry leading services to our clients and stakeholders. Join us to be part of a dynamic and growing team that values diversity and fosters professional growth.

IT works closely with operational and support teams across the UK, providing the technology, systems, and infrastructure that enable the business to operate efficiently, securely, and effectively.

The team is responsible for maintaining, securing and supporting business-critical applications, networks, devices, and digital services, while driving technology improvements and innovation across the organisation.

Through responsive support, robust security practices, and continuous development of IT solutions, the team helps ensure employees have the tools and technology they need to perform at their best.

Cyber Security Analyst

Leeds/London/Midlands (hybrid work pattern)

Full-time, Monday to Friday (37.5 hours per week), with flexible working options.

We are seeking a Cyber Governance Analyst to support the development and maintenance of our governance, risk, and compliance activities. The successful candidate will play a key role in ensuring the organisation remains compliant with Cyber Essentials, ISO 27001, and GDPR requirements, while also running wider security awareness initiatives. This role is best suited to someone with a strong eye for detail, excellent documentation skills, and an interest in building a career within information security governance.

Occasional travel to regional sites is required, therefore a UK driving licence is essential.

• Coordinate the maintenance of ISO 27001 compliance, audits, and documentation.
• Coordinate Cyber Essentials certification, gathering evidence and tracking remediation actions.
• Maintain accurate logs and reports for backup checks, access reviews, and other compliance processes.
• Produce reports and metrics for management on compliance status and risks.
• Track and assess third-party and supply-chain security risks. Build and run security awareness training plans, manage communications and security culture across the organisation.
• Provide governance input to IT and business projects, ensuring security requirements are considered from the outset.
• Manage the security and IT risk registers, chairing the monthly risk meeting and ensuring action and remediations as agreed.
• Support business continuity, disaster recovery and major incident response and process.
• Support building a well-rounded security team, providing guidance and maturity across IT.

Skills & Experience:

• 2–5 years’ experience in IT, compliance, or data-related roles.
• Familiarity with Microsoft Azure and Entra  a compliance/security perspective.
• Exposure to security frameworks such as ISO 27001 or Cyber Essentials.
• Certifications (e.g., CompTIA Security+, ISO 27001 Lead Implementer, CISMP) either gained or being worked towards.
• Experience maintaining policies, evidence, risk registers or compliance documentation would be advantageous.
• Strong attention to detail and documentation skills.
• Analytical mindset with the ability to author and interpret policies and standards.
• Effective communicator, able to explain security requirements across different teams.
• Organised and capable of handling multiple tasks simultaneously.
• Proactive, inquisitive and willing to develop knowledge across the wider cyber security discipline.

By embedding our companies core values and…