Senior Information Security & Compliance Analyst at Cloudnc

You will own Cloudnc.com’s information security compliance and assurance programme, managing frameworks like ISO 27001, SOC 2, and FedRAMP. As a hands-on individual contributor, you’ll coordinate audits, manage the security risk register, and lead incident response processes. This pivotal role ensures security becomes central to the company’s operations as it scales globally.

• Maintain and operate the continuous compliance programme across ISO 27001, SOC 2, Cyber Essentials, and FedRAMP requirements, including audit evidence collection and validation.
• Lead the lifecycle of information security policies and the risk register, facilitating regular reviews with stakeholders and escalating material failures to leadership.
• Coordinate the security incident-management process, triaging events and engaging technical specialists across IT, cloud, and engineering teams to ensure rapid remediation and documentation.

• Brings at least four years of hands-on experience in GRC, information security, or compliance, with a proven track record of independently operating security frameworks.
• Possesses deep practical knowledge of ISO 27001 or SOC 2, including experience drafting policies and managing complex audits to successful closure.
• Demonstrates sufficient technical literacy to communicate effectively with engineering teams and the ability to challenge control owners without direct management authority.

• Take full ownership of a scaling compliance programme, directly shaping how Cloudnc.com builds trust with high-stakes enterprise and defense-sector customers.
• Join a well-funded Series B firm backed by industry giants like Autodesk and Lockheed Martin Ventures, working at the intersection of AI and heavy manufacturing.
• Operate in a best-of-both-worlds environment: a remote-first culture combined with access to a physical factory in Chelmsford to see software impact real-world production machines.