The posting
As our Junior Compliance Analyst, you will act as the crucial link between our day-to-day business activities and regulatory governance. Working closely with the Head of Compliance & Regulatory, you will translate platform architectures, technical controls, and operational processes into structured, audit-ready compliance evidence
. Your daily responsibilities will centre on:
- Audit Readiness & Evidence Management: Collecting and organising technical control evidence across core security and regulatory frameworks, including ISO 27001, HIPAA, and PCI DSS.
- Security & Vulnerability Coordination: Liaising with internal technical teams to track vulnerability remediations, schedule periodic penetration testing, and coordinate regular user access reviews.
- Customer RFIs & Security Questionnaires: Assisting with the completion and timely submission of customer security questionnaires, vendor assessments, and technical Request for Information (RFI) documents.
- Technical Incident Support: Supporting the compliance team during technical security incidents by capturing technical details and feed them into data breach assessment workflows and regulatory reporting timelines.
- Compliance & Risk Tracking: Maintaining governance records, administrative filings, risk registers, and standard operating procedures, whilst supporting the rollout of internal security training
Requirements
- Strong Communicator & Translator: Ability to communicate effectively with technical software engineers and translate complex technical security concepts into clear, formal compliance documentation.
- Meticulous Attention to Detail: Exceptional organisation, documentation, and record-keeping skills with an analytical mindset.
- Collaborative Partner: Proven ability to build positive working relationships across internal business, technical, and compliance teams.
- Curious & Eager to Learn: A strong desire to continuously learn and develop hands-on exposure across information security, data protection, and cloud governance frameworks.
Essential Requirements
- Educational Background or Equivalent: A formal qualification (such as a degree, diploma, or certification) in Data Protection, Cybersecurity, Law/GRC, or demonstrable equivalent practical experience in a similar role.
- Security Fundamentals: A foundational, structured understanding of IT systems, information security principles, and cloud architectures
- Evidence Collection Experience: Direct experience or a clear understanding of how to collect, verify, and organise technical compliance evidence (such as system logs or configurations) within organised repositories (such as Confluence or SharePoint).
Our Recruitment Process
Thank you for your interest in joining the Natterbox team. We believe in transparency, structured feedback, and human-centred communication. Below is a clear outline of what you can expect during your candidate journey with us.
Our Communication Commitment
We respect the time and effort it takes to submit an application. All applicants will receive a response from us.
Please note: Due to the high volume of applications we receive, we are unfortunately unable to provide individual, personalised feedback at the initial CV review stage.
Stage 1: Initial CV Review
Our People Team carefully reviews every CV against the core competencies and technical requirements of the role.
Stage 2: People Team Interview (30 Minutes)
If your application matches our criteria, you will be invited to a 30-minute introductory call with a member of our People Team.
- What to expect: This is a two-way conversation to review your CV, discuss your background, and talk through how your skills and experience align with the role.
Stage 3: Department Manager
Candidates progressing to the next round will have a focused call with the Department Head.
- What to expect: A deeper discussion into the practical, day-to-day elements of the role, your technical diagnostics approach, and how you tackle customer support challenges.
Stage 4: Competency Stage Interview
What to expect: We will give you the details prior to your interview.
Stage 5: Final Executive Review
The final stage is a call with a member of our Executive Team.
- What to expect: A high-level conversation focused on long-term career growth, alignment with Natterbox values, and our overall company vision.
🤖 Important Note on the Use of Artificial Intelligence (AI)
We encourage our candidates to embrace modern tools and work smart.
- What is acceptable: It is completely fine to use generative AI (such as ChatGPT, Gemini, or spelling/grammar assistants) to help refine, format, or polish your CV structure and application answers.
- What is not acceptable: We strictly ask that you do not use AI to generate or write answers on your behalf.
We value authenticity, genuine communication, and real problem-solving. Our multi-stage interview process is designed to deeply assess your individual skills and unique technical approach. Relying on AI to answer on your behalf during the application stages creates a disconnect during live conversations, and ultimately prevents us from getting to know the real you. Please ensure all submitted answers reflect your own words and honest experience.
Benefits
We offer a range of benefits to all our employees.
- Competitive base salary - £28,00-£32,000 - depending on experience
- 25 days holiday increasing to 30 days after 2 years (plus bank holidays).
- Access to Perkbox - Hundreds of handpicked retail discounts, wellness perks, and monthly freebies to support your lifestyle.
- Auto enrol pension
- Private Health care - after probation
Please note: Candidates are required to have the permanent Right to Work in the UK. We are unable to accept applications from candidates who do not possess this, and we cannot offer visa sponsorship for this role.
