Location
London

Hours
Full Time

Salary
£40,000 per annum

About the Role
We are looking for a Security and Compliance Analyst to join the National Theatre's IT team. The Security & Compliance Analyst is a key member of the IT team, working closely with the Head of Cyber Security to strengthen organisational cyber resilience. This assurance-led role involves running the day-to-day audit and compliance programme, coordinating vulnerability remediation with platform owners, evidencing the effectiveness of technical controls including identity, endpoint and cloud, and providing second-line cover for security tickets escalated by Helpdesk. The analyst liaises with internal audit by providing reports, evidence and status updates on control assurance and remediation, ensuring audit requirements are met and findings addressed in a timely and transparent manner.

Working with us will give you complimentary staff tickets for shows and guided tours (subject to availability and policy), 25 days annual leave increasing up to 32 with length of service (plus bank holidays), development programmes via e-learning and specialist in-person training, access to interest-free season ticket loan and cycle scheme partnership, enhanced sick pay, family friendly policies including family leave and support leave, pension schemes with Legal & General and NEST, sabbatical option subject to agreement, on-site staff canteen and social facilities, occupational health support, in-house mental health and wellbeing advisors, wellbeing programme of events, exclusive staff talks, discounted access to National Theatre at Home, volunteer leave of one paid day per year, discounts in NT’s bars, cafés, restaurants and bookshop as well as local businesses, and access to retailer discounted gift cards and a cash-back-on-spending card.

Experience
Significant demonstrable experience in a security, IT audit, compliance or technical IT role.

About you
Methodical and well-organised with strong documentation habits; willing to ask questions and learn quickly. Clear written and verbal communication skills with the ability to translate technical findings into evidence, actions and outcomes for non-technical stakeholders. An understanding of how cyber security risk is identified, assessed and managed.

Qualifications
Practical experience of audit and compliance work against a recognised security framework (e.g. CAF, ISO 27001, Cyber Essentials Plus) and an understanding of how it translates into practical controls and evidence.