Senior Trust Security Analyst

Job summary

<div class="content-intro"><p>At nic***, we don’t limit our challenges. We challenge our limits. We’re game changers.

Qualifications

• li>
• h2>Audit</h2>
• h2>Communication & Stakeholder Management</h2>
• li><strong>Customer Meetings: </strong>participate in security review meetings, capture feedback and action items, and ensure timely follow-up and resolution by technical teams.</li>
• li><strong>Cross-Functional Coordination: </strong>Coordinate input from internal teams to validate questionnaire answers and resolve gaps between stated controls and operational reality.</li>
• p> </p>
• h4><strong>Have you got what it takes?</strong></h4>
• li><strong>Citizenship & Clearance: </strong>UK citizenship and ability to pass and maintain SC clearance.</li>
• li><strong>Experience: </strong>5+ years in a security, GRC, trust, or technical customer-facing role, with direct ownership of security questionnaires, customer inquiries, and security reporting.</li>
• li><strong>Questionnaire Expertise: </strong>Hands-on experience responding to SIG, CAIQ, VSA, and bespoke enterprise/government security questionnaires.</li>
• li><strong>Compliance Knowledge: </strong>Working knowledge of Cyber Essentials Plus, ISO 27001, SOC 2 Type II, and at least one of PCI DSS, GDPR/UK GDPR, HIPAA, or FedRAMP.</li>
• li><strong>Cloud & SaaS: </strong>Familiarity with cloud infrastructure (AWS, Azure, or GCP) and SaaS security models.</li>

Responsibilities

• this role serves as the dedicated liaison between UK Sovereign technical security teams and customers, ensuring transparency, trust, and proactive communication.
• h4>How will you make an impact?</h4>
• h2>Customer Trust & Security Engagement</h2>
• li><strong>Trusted Advisor: </strong>Serve as the primary point of contact for UK Sovereign customers on all matters related to security posture, vulnerabilities, remediation activities, and trust documentation.</li>
• h2>Security Posture & Vulnerability Reporting</h2>
• li><strong>Security Posture Assessment: </strong>Collaborate closely with UK Sovereign technical and engineering teams to understand and assess the current security posture of UK Sovereign environments.</li>
• li><strong>Remediation Oversight: </strong>Monitor and track remediation activities across engineering and security teams, ensuring alignment with agreed timelines and compliance

Skills

Certifications

Degrees

Industry

Company size

Security clearance