Security Risk and Compliance Analyst

Role Overview

• The Security Risk and Compliance Analyst is the operational engine of AutoStore's Technology Risk and Compliance function
• Turning frameworks and policies into working processes
• Maintaining the evidence base for assurance activities
• Keeping the compliance position current and visible
• Reporting to the CISO and works across IT, Legal, Finance, HR, and Product
• Ensures regulatory and certification obligations are met
• Documents and evidences controls
• Works closely with the Senior Risk and Compliance Professional on a day-to-day basis
• Escalates material issues to the CISO
• Responsible for supporting the assurance and testing cycle
• Coordinates with control owners and flags gaps or discrepancies to the SRCP or CISO as appropriate
• Owns the operational management of the risk exception and control deviation process

Requirements

• Experience in a compliance, GRC, risk, or information security role with hands-on operational delivery responsibilities
• Familiarity with control frameworks, including documenting, evidencing, and testing controls, and supporting audit activities
• Strong organisational skills, with the ability to manage multiple concurrent workstreams and maintain accurate records
• Clear written communication skills, able to translate compliance requirements into plain-language guidance for non-specialists
• ISO 27001 Lead Implementer/Auditor certification, or equivalent (Desirable)
• Experience delivering security awareness programmes, including phishing simulations (Desirable)
• Experience with GRC tooling or security awareness training platforms (Desirable)
• Familiarity with AI governance considerations and the compliance and risk implications of AI tool adoption (Desirable)

Benefits

• Health insurance
• Generous pension plan
• 1 hour per week of paid exercise