Security Compliance Specialist England, United Kingdom England, United

Croydon, England, United Kingdom;
Manchester, England, United Kingdom

Janes empowers military, government, and defence leaders to act with confidence in an increasingly complex world. Our trusted defence, security, and geopolitical information delivered through seamless digital platforms and system integrations—turns overwhelming data into clear, actionable intelligence and insight. By filling critical information gaps, Janes helps customers analyse threats, accelerate decisions, and stay ahead of emerging challenges.

Job purpose:

We are seeking an experienced Security Compliance Specialist with expertise in implementing and maintaining security monitoring and compliance programmes. The must have a strong background working with development teams and cloud-based service providers.

You will be working as part of a team based in either Croydon or Manchester. You should be self-motivated, a natural problem solver, and used to operating independently.

How you will contribute at Janes:

• Responsible for delivering the annual ISO
  27001 & Cyber Essentials programmes
• Own and co-ordinate the security testing roadmap, and provide key support to the overall Security strategy
• Conduct regular risk assessments to identify potential security threats and vulnerabilities and recommend appropriate mitigation strategies. Internal and within the supply chain.
• Monitor and audit IT systems and processes to ensure ongoing compliance with internal policies and external regulations.
• Lead on security assessment of suppliers
• Responding to security questionnaires from customers
• Develop and deliver training programs to educate employees about IT security policies, procedures, and best practices.
• Share knowledge, promote and coach standards and best practice

The ideal skills and experience for this role are:

• 6+ years experience in Information Security Risk and Compliance
• Knowledge of security and compliance standards across Info Sec (e.g. ISO 27001, Cyber Essentials, NIST, CMMC)
• Expertise in Azure, Microsoft 365 & AWS Security Compliance
• Experience of Supply Chain compliance
• 27 days of annual leave
• Healthy half (0.5 day leave every 6 months for wellbeing)
• Private medical insurance– Vitality
• Maternity (100% of basic salary for the first 26 weeks followed by Statutory Maternity Pay)
• Paternity (100% of basic salary for 6 weeks)
• Life cover
• Access to Linked In Learning
• Access to an on-site gym (Only in Croydon.)

Our Mission:

Creating trusted open-source intelligence has always been our focus. Janes foundational defence intelligence, across military capabilities and order of battle, equipment, events, and defence industry, is verified and validated using our human-centric tradecraft to deliver the highest levels of assurance.

While open-source data is readily available to analysts and decision makers, it can be unmanageable in structure and volume, is not assured, and can be manipulated either intentionally or unintentionally. Janes open-source intelligence is verified and validated through our Tradecraft processes within our Single Intelligence Environment (SIE). Janes uses a multi-faceted approach to open-source intelligence, developed over 120 years, with all sources assessed for bias/objectivity, reliability, and level of certainty.

We excel at capturing and making sense of open-source information to regularly reveal new and timely insights. We provide clients with a definitive source of the ‘what’, the context to understand the ‘why’ and, particularly within our dedicated forecasting products, a prediction of what will happen in the future. Our news provides both a factual journal of record and commentary in order to add the necessary context behind the facts.

Our goal is to ensure our journalism and analysis is better, sharper, more relevant, more comprehensive, and more useful than other open-source providers. We achieve this through employing more than 250 analysts supported by many hundreds more freelance experts to source and verify information. Our experts are supported by technologies such as natural language processing, web scraping and monitoring, data visualization, and other analytical tool sets.

A key value we provide is topic selection:…