Cyber Governance Analyst
Role Overview
Support development and maintenance of governance, risk, and compliance activities and help maintain compliance with Cyber Essentials, ISO 27001, and GDPR.
The role also runs security awareness initiatives and suits someone with strong attention to detail, documentation skills, and an interest in information security governance.
Key Skills for This Role
Full Job Posting
Company and department
Lanes Group is a nationwide utility services provider with around 5,000 employees.
The IT department supports operational and support teams with business-critical applications, networks, devices, and digital services, and maintains security and technology improvements.
Purpose of the role
Support development and maintenance of governance, risk, and compliance activities and help maintain compliance with Cyber Essentials, ISO 27001, and GDPR.
The role also runs security awareness initiatives and suits someone with strong attention to detail, documentation skills, and an interest in information security governance.
Location and working pattern
- The role lists Leeds, London, or the Midlands and a hybrid work pattern.
- Occasional travel to regional sites is required.
Hours
- Full-time, Monday to Friday, 37.5 hours per week, with flexible working options.
Key responsibilities
- Coordinate ISO 27001 compliance, audits, documentation, Cyber Essentials certification, evidence gathering, and remediation tracking.
- Maintain logs and reports for backup checks, access reviews, compliance status, and risks.
- Track third-party and supply-chain security risks; build and run security awareness plans, communications, and culture initiatives.
- Advise IT and business projects on security governance; maintain risk registers, chair monthly risk meetings, and follow up actions.
- Support business continuity, disaster recovery, major incident response, and development of security maturity across IT.
Skills and experience
- Have 2–5 years of experience in IT, compliance, or data-related roles.
- Be familiar with Azure and Entra ID from a compliance or security perspective.
- Have exposure to frameworks such as ISO 27001 or Cyber Essentials; related certifications may be gained or in progress.
- Experience maintaining policies, evidence, risk registers, or compliance documentation is advantageous.
- Bring strong attention to detail, documentation and analytical skills, communication ability, organization, and willingness to develop cybersecurity knowledge.
- Hold a UK driving licence because occasional regional-site travel is required.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Lanes Group PLC
Product Analyst
Eccles, GBR
Lanes Group is seeking a Product Analyst to help operational teams and Product Owners understand business challenges and deliver technology improvements. The work includes process and requirements analysis, stakeholder d
FP&A Analyst
Leeds, GBR
Lanes Group is seeking an FP&A Analyst to support financial planning, forecasting, reporting, and commercial decision-making. Candidates need a relevant bachelor's degree, at least two years of relevant experience, stron
Senior FP&A Business Partner
Leeds, GBR
Lanes Group seeks a Senior FP&A Business Partner to advise senior leadership and shape financial performance and strategy. The role leads planning, forecasting, analysis, and strategic finance projects while developing j
Traffic Management Operative
Theale, GBR
Lanes Group is seeking a Traffic Management Operative to support planned and reactive traffic management schemes while maintaining safe, efficient worksites. Candidates need the specified Lantra and TTMBC accreditations,
Traffic Management Operative
Kidlington, GBR
Lanes Group is seeking a Traffic Management Operative to support planned and reactive road traffic management schemes. The role involves setting up and overseeing traffic controls, completing safety checks and risk asses
Operations Manager
, GBR
Lanes Group is seeking an Operations Manager to lead wastewater maintenance, reactive response, and resilience delivery across Yorkshire Water frameworks. The role requires operational leadership experience, budget overs
DSAR Analyst
, GBR
Lanes Group seeks a DSAR Analyst to coordinate data subject rights requests and support its wider data protection and privacy programme. The role covers request handling, privacy assessments, incident investigations, com
Senior Quantity Surveyor (Wastewater / Capital Projects)
Leyland, GBR
Sapphire Utility Solutions seeks a Senior Quantity Surveyor to support commercial and contract management for wastewater capital projects. The role covers cost control, NEC contract administration, change management, rep
Product Analyst
Eccles, GBR
FP&A Analyst
Leeds, GBR
Senior FP&A Business Partner
Leeds, GBR
Traffic Management Operative
Theale, GBR
Traffic Management Operative
Kidlington, GBR
Operations Manager
, GBR
DSAR Analyst
, GBR
Senior Quantity Surveyor (Wastewater / Capital Projects)
Leyland, GBR