{"id":1913280,"url":"https://alion.io/job/edenred-information-security-compliance-analyst","title":"Information Security Compliance Analyst","company":{"id":52942,"name":"Edenred","domain":"edenred.com","url":"https://alion.io/company/edenred","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":27,"ghost_share":0,"stale_share":0.741,"repost_share":0,"time_to_fill_p50_days":45,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Swindon, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":null,"max":45000,"currency":"GBP","period":"year","gross":null,"usd_annual":59377},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"Confluence","optional":true},{"name":"Jira","optional":true}],"status":"live","first_seen_at":"2026-10-05T15:23:15Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-14T20:17:44Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Take a step forward and let Edenred surprise you.\nEvery day, we deliver innovative solutions to improve the life of millions of people, connecting employees, companies, and merchants all around the world.\nWe know there are hundred ways for you to grow. With us, you will expand your skills in a multicultural, challenging, and dynamic environment.\nDare to join Edenred and get ready to thrive in a global company that will offer you endless opportunities.\nEdenred is all about meritocracy. You come as you are, and you contribute. Indeed, the Edenred Group recognizes, recruits and develops all talents and singularities.\nWe are committed to preventing all forms of discrimination and to providing all our candidates with equal opportunities regardless of their gender and gender expression, disability, origin, religious belief and sexual orientation or any other criteria.\nInformation Security Compliance Analyst\nSalary: Up to £45,000 per annum + Bonus\nSwindon/London - Hybrid\nObjective:\nYou will support the Information Security function across PayTech by coordinating and improving compliance activities, helping ensure that security controls remain effective, evidenced, and aligned to regulatory, client, and internal requirements. The role partners with business, technology, audit, and group stakeholders to drive practical compliance outcomes across PCI DSS, DORA, and other regulatory and risk frameworks, internal control assurance, security awareness compliance, and client due diligence activity. \nCrucial to this role is helping maintain PayTech's ability to demonstrate that security controls operate in practice, not only on paper, and that identified gaps are tracked, escalated, and supported through to closure. The role also helps improve confidence in PayTech's security posture by supporting internal audit requirements and responding to client security questionnaires and audits in a structured, repeatable way.\nResponsible for:\nThe Compliance Analyst is responsible for supporting the day-to-day operation of PayTech's security compliance activities. This includes maintaining evidence and documentation, assisting with PCI DSS readiness, coordinating responses to internal audit and client assurance requests, owning the security awareness programme and activities, liaising with our learning teams and wider group functions to maintain the content and ensure it’s delivery, and helping track remediation actions across the business. The role works closely with the rest of the PayTech information security team, technology teams, and group functions to ensure that compliance activity leads to measurable risk reduction and operational improvement.\nPromote the use of standard frameworks and consistent evidence practices so that PayTech can meet immediate PCI DSS and audit obligations while improving compatibility with wider regulatory, group, and client assurance expectations. This includes maintaining clear records and minutes, repeatable processes, and practical reporting that supports internal governance and external assurance activity.\nWhat you will be doing:\nSupport and coordinate PCI DSS compliance activity, including evidence collection, control tracking, action follow-up, and audit readiness reviews. \nAssist with internal audit requirements by gathering evidence, coordinating with control owners, tracking findings, and supporting timely remediation closure. \nSupport responses to client security questionnaires, due diligence requests, and client-led audits by coordinating inputs, maintaining standard response packs, and improving consistency of answers. \nMaintain and improve compliance documentation, including policies, procedures, standards, evidence libraries, control descriptions, and meeting records. \nTrack security awareness compliance activities, including completion reporting, support for awareness campaigns, policy attestations, and follow-up of non-compliance. \nConduct scheduled compliance checks and sample reviews to help confirm that required controls and processes are operating as expected.\nSupport risk and exception management by ensuring issues are logged, documented accurately, escalated where required, and reviewed through the proper governance forums. \nWork with technology, engineering, operations, legal, compliance, finance, and group teams to provide clear guidance on evidence expectations and policy requirements. \nProduce reporting and dashboards on compliance status, audit actions, awareness completion, and outstanding remediation items. \nContribute to continuous improvement of compliance processes so that audit and assurance activity becomes more efficient, repeatable, and less dependent on manual chasing. \nKey Result Areas:\nPCI DSS and Control Assurance: Help ensure PCI DSS obligations are supported through well-maintained evidence, control tracking, and readiness for formal assessment activity. The role supports the reduction of audit-visible process gaps by improving documentation quality and follow-through on actions. \nInternal Audit Support: Ensure that internal audit requests are handled in a timely, organised, and professional manner, with clear ownership, accurate evidence, and tracked remediation. \nClient Assurance and Trust: Improve PayTech's ability to respond consistently and credibly to client security questionnaires, assurance requests, and audit queries by maintaining reusable information packs and accurate records. \nSecurity Awareness Compliance: Support the monitoring and improvement of staff compliance with mandatory security training, awareness activities, and policy acknowledgement requirements. \nPolicy and Documentation Quality: Maintain clear, current, and usable compliance documentation aligned with PayTech requirements and Edenred group direction. \nIssue Tracking and Closure: Help ensure audit actions, compliance gaps, and exceptions are visible, correctly recorded, and driven to closure within agreed timescales. \nRegulatory Landscape and Best Practice: Maintain awareness of relevant standards and obligations affecting the role, including PCI DSS, audit expectations, and broader control assurance good practice, and apply these appropriately in daily work.\nMeasuring Success:\nPerform against agreed metrics detailed in objectives such as:\nPCI evidence readiness: percentage of key PCI evidence items current, complete, and available for review at agreed checkpoints. \nAudit action closure rate: percentage of internal and external audit actions closed within agreed target dates. \nQuestionnaire turnaround time: average time to coordinate and complete client security questionnaire responses. \nResponse quality and reuse: percentage of client assurance responses delivered using approved standard content packs, reducing inconsistency and rework.\nAwareness compliance rate: percentage of staff completing mandatory security awareness training and attestations within target timescales. \nPolicy review completion: percentage of in-scope compliance documents reviewed and updated to schedule. \nOpen exception age: average age of open compliance exceptions or overdue evidence requests. \nGovernance reporting timeliness: percentage of required compliance and audit reports delivered on schedule. \nWhat you will bring:\nQualifications & Experience\nRequired Experience:\nStrong experience in information security compliance, IT audit, risk, governance, or a related control assurance role. \nPractical experience supporting compliance or assurance activity against at least one recognised framework such as PCI DSS, ISO 27001, SOC 2, or similar. \nExperience coordinating evidence collection and working with control owners, auditors, or business stakeholders. \nExperience maintaining structured documentation, trackers, and records to support audit or compliance requirements. \nAbility to work across multiple teams to follow up actions, clarify requirements, and keep activity moving. \nStrong written communication skills for drafting policies, procedures, evidence summaries, and questionnaire responses. \nPreferred Experience:\nExperience in financial services, FinTech, payments, or another regulated environment. \nExposure to internal audit processes, client due diligence questionnaires, or external client assurance reviews. \nExperience supporting security awareness campaigns, training compliance, or policy attestation processes. \nFamiliarity with Jira, Confluence, Excel, ticketing systems, and evidence repositories. \nSkills & Certifications\nCertifications (desirable, not mandatory):\nPCI-related training or assessor/audit exposure. \nISO 27001 Foundation, Internal Auditor, or Lead Implementer. \nCISA, CRISC, or equivalent governance / audit certification pathway. \nSecurity+, ISC2 CC, or similar entry-level security certification. \nSkills:\nStrong organisation and attention to detail, with the ability to keep documentation accurate, current, and audit ready. \nGood stakeholder coordination skills and the confidence to follow up actions with teams across business and technology functions. \nAbility to explain compliance requirements in clear, practical language and translate requests from auditors or clients into actionable asks. \nSolid reporting capability, including maintenance of dashboards, metrics, evidence trackers, and status updates. \nAbility to handle sensitive information professionally and maintain confidentiality in client, audit, and internal matters. \nContinuous improvement mindset, helping standardise recurring compliance tasks and reduce manual overhead. \nWhy Edenred PayTech?\nWe are a subsidiary of the Edenred group and leaders in prepaid solutions including banking, virtual cards, debit, credit, and prepaid processing.\nAs an Edenred PayTech employee you will get the support and structure that you need to enjoy your work and develop your career while doing what you love and making a difference in a fast-paced and innovative business.\nWhat you will get:\n25 days annual leave plus Bank Holidays\nHybrid working environment (min. 3 days per week in the office)\nPension Scheme - employer 6% with minimum employee contribution 3%\nDiscretionary bonus scheme based on company and personal performance\nMedical & international travel cover (leisure and action sports)\nLife insurance (4x salary)\nWellbeing Employee Assistance Program (extended access to family members)\nHoliday trading scheme\nSeason ticket loan\nCycle to Work scheme\nEmployee discount shopping platform\nEmployee referral bonus scheme\nDigital learning platform\nComplimentary fruit and other ‘in office’ snacks & refreshments\nVolunteering programme\nSocial events\nDiversity:\nEdenred PayTech are proud to be an equal opportunity employer. We will not discriminate against any applicant or employee based on age, race, colour, creed, religion, sex, sexual orientation, gender, gender identity or expression, national origin, citizenship, marital status or civil partnership/union status, disability, pregnancy, genetic information, or any other basis prohibited by applicable country or local laws.\nApply now and Vibe with Us!","description_format":"text","description_chars":11061,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Hybrid work","Life insurance"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Payment Processing & Gateways","Human Resources"],"lifecycle":[{"event":"open","at":"2026-10-05T15:23:15Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.601,"p_room":1,"age_days":8,"expected_fill_days":45,"reasons":["conf:22","stale_co","velocity","win:early","comp:junior,brand"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":59377,"is_top_pay":false},"html_url":"https://alion.io/job/edenred-information-security-compliance-analyst","json_url":"https://alion.io/job/edenred-information-security-compliance-analyst.json","meta":{"generated_at":"2026-10-14T22:01:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29543,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52942},"rest":"https://alion.io/mcp/rest/get_company?id=52942"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fedenred-information-security-compliance-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fedenred-information-security-compliance-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fedenred-information-security-compliance-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/edenred-information-security-compliance-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fedenred-information-security-compliance-analyst"}]}