Security Analyst – Part-Time

Posted 1ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Part-time Security Analyst strengthening wi-Q’s hospitality ordering platform security and compliance. Managing ISO 27001, PCI DSS, risk, access governance, and audit readiness.

Responsibilities:

  • Own recurring security, governance, and compliance work supporting the company’s certifications and platform trust
  • Oversee identity and privileged-access reviews and credential management
  • Run supplier security reviews and maintain compliance evidence
  • Complete security questionnaires and respond to customer due diligence
  • Oversee vulnerability management and drive findings through resolution
  • Review new features and changes, including AI functionality, for security and data-protection impact
  • Maintain and evidence ISO 27001, PCI DSS, and Cyber Essentials Plus certifications
  • Conduct security risk assessments and maintain the risk register
  • Coordinate security awareness and secure-development training
  • Support incident-response exercises, business continuity, and backup assurance
  • Maintain accurate security policies and governance documentation
  • Support data-protection obligations and GDPR-related practices
  • Report security and compliance posture to leadership and flag risks early

Requirements:

  • Hands-on experience running ISO 27001 ISMS operations and PCI DSS compliance, ideally in a SaaS or technology environment
  • Relevant qualifications such as ISO 27001 Lead Implementer, CRISC, CompTIA Security+, or PCIP; ISO 27001 Lead Auditor is a bonus
  • Familiarity with Cyber Essentials Plus, access recertification, supplier security reviews, and evidence collection
  • Ability to work autonomously and drive controls through to completion
  • Ability to communicate clearly with engineers, HR, and an external virtual CISO
  • Pragmatic, data-driven approach focused on effective controls
  • Desirable exposure to GDPR and data-protection operations, GRC tooling, and cloud environments