Junior Compliance Analyst

As our Junior Compliance Analyst, you will act as the crucial link between our day-to-day business activities and regulatory governance. Working closely with the Head of Compliance & Regulatory, you will translate platform architectures, technical controls, and operational processes into structured, audit-ready compliance evidence

• Your daily responsibilities will centre on:
• Audit Readiness & Evidence Management:
  Collecting and organising technical control evidence across core security and regulatory frameworks, including ISO 27001, HIPAA, and PCI DSS.
• Security & Vulnerability Coordination:
  Liaising with internal technical teams to track vulnerability remediations, schedule periodic penetration testing, and coordinate regular user access reviews.
• Customer RFIs & Security Questionnaires:
  Assisting with the completion and timely submission of customer security questionnaires, vendor assessments, and technical Request for Information (RFI) documents.
• Technical Incident Support:
  Supporting the compliance team during technical security incidents by capturing technical details and feed them into data breach assessment workflows and regulatory reporting timelines.
• Compliance & Risk Tracking:
  Maintaining governance records, administrative filings, risk registers, and standard operating procedures, whilst supporting the rollout of internal security training

• Strong Communicator & Translator:
  Ability to communicate effectively with technical software engineers and translate complex technical security concepts into clear, formal compliance documentation.
• Meticulous Attention to Detail:
  Exceptional organisation, documentation, and record-keeping skills with an analytical mindset.
• Collaborative Partner:
  Proven ability to build positive working relationships across internal business, technical, and compliance teams.
• Curious & Eager to Learn: A strong desire to continuously learn and develop hands‑on exposure across information security, data protection, and cloud governance frameworks.

• Educational Background or Equivalent: A formal qualification (such as a degree, diploma, or certification) in Data Protection, Cybersecurity, Law/GRC, or demonstrable equivalent practical experience in a similar role.
• Security Fundamentals: A foundational, structured understanding of IT systems, information security principles, and cloud architectures
• Evidence Collection
  
  Experience:
  
  Direct experience or a clear understanding of how to collect, verify, and organise technical compliance evidence (such as system logs or configurations) within organised repositories (such as Confluence or SharePoint).

Thank you for your interest in joining the Natterbox team. We believe in transparency, structured feedback, and human‑centred communication. Below is a clear outline of what you can expect during your candidate journey with us.

We respect the time and effort it takes to submit an application. All applicants will receive a response from us.

Please note: Due to the high volume of applications we receive, we are unfortunately unable to provide individual, personalised feedback at the initial CV review stage.

Our People Team carefully reviews every CV against the core competencies and technical requirements of the role.

If your application matches our criteria, you will be invited to a 30‑minute introductory call with a member of our People Team.

• What to expect:
  This is a two‑way conversation to review your CV, discuss your background, and talk through how your skills and experience align with the role.

Candidates progressing to the next round will have a focused call…