Security Analyst (Part-Time)

The Role As a part-time Security Analyst, you ll own the recurring security, governance and compliance work that keeps wi-Q s certifications strong and our platform trustworthy as we scale. This is a half-time role, working alongside our Engineering and DevOps teams and our senior security leadership. This isn t a helpdesk role and it isn t a 24/7 monitoring desk. You ll be the driving force behind our ISO 27001, PCI DSS and Cyber Essentials Plus programmes, keeping our controls running like clockwork and our evidence audit-ready. It s proactive, autonomous work with a direct impact on the certifications we hold and the enterprise trust we earn. Key Responsibilities Identity and access governance: oversee access and privileged-access reviews, and help keep our identity and credential management robust as the business grows. Third-party and supplier security: run our supplier security review programme and maintain the compliance evidence our certifications and enterprise customers require. Customer and enterprise assurance: support our sales and account teams by completing security questionnaires and responding to customer due diligence. Vulnerability and patch assurance: oversee vulnerability management, making sure findings are prioritised and driven through to resolution. Secure-by-design: review new features and changes (including AI functionality) for security and data-protection impact before release, helping embed secure-by-design across product and engineering. Compliance operations: help maintain and evidence our ISO 27001, PCI DSS and Cyber Essentials Plus certifications, and keep us ahead of relevant regulatory change. Risk management: carry out security risk assessments and help maintain our risk register, working with teams across the business to manage and reduce risk. Security awareness and training: coordinate our security awareness programme and support secure-development training across the team. Resilience and incident readiness: support our incident-response exercises, business continuity and backup assurance. Documentation and governance: help keep our security policies and documentation accurate, relevant and aligned with how we operate. Data protection: support our data-protection obligations, including day-to-day data-handling practices and our responsibilities under GDPR. Reporting: provide leadership with clear visibility of our security and compliance posture, flagging risks early.

Desired Candidate Profile

Hands-on experience running ISO 27001 ISMS operations and PCI DSS compliance, ideally in a SaaS or technology environment. A relevant qualification: ISO 27001 Lead Implementer is the strongest signal for this role (Lead Auditor a bonus), alongside something like CRISC or CompTIA Security+ at mid level, and PCIP for the PCI-specific work. Familiarity with Cyber Essentials Plus, access recertification, supplier security reviews and evidence collection. A self-starter who works autonomously, chases things to closure, and enjoys turning ad hoc controls into scheduled, evidenced ones. A clear communicator who can work well with engineers, HR and an external virtual CISO. A pragmatic, data-driven mindset: you care about the control actually working, not just the paperwork looking right. Desirable: exposure to GDPR and data-protection operations, GRC tooling, and cloud environments.