Information Security and Data Privacy Analyst Ready to do the best work of your life? Join us, and bring everything you have to solve the most fulfilling problems on the market. As a Gold accredited Investor in People we have everything you need to propel your career to new heights. Inclusion is the beating heart of Alfa so whoever you are, you can show up as your best self everyday - be that from home, from our offices, or a little bit of both. We’ve got the tech, we’ve got the opportunities, all we’re missing is you. Alfa are currently recruiting a Information Security and Data Privacy Analyst. The Information Security and Data Privacy Analyst contributes to the information security, data protection, artificial intelligence and audit/compliance functions within the organisation. Key responsibilities/activities; Data Privacy and Artificial Intelligence Develop and maintain Data Privacy and Artificial Intelligence policies and procedures. Monitor organisational compliance with relevant Data Privacy regulations (GDPR, CCPA, etc.). Create and maintain data inventories and data flow maps. Design and deliver staff data protection training. Stay current with evolving regulations (EU AI Act, etc.). Information Security Maintain and improve the Information Security policies and procedures. Maintain and improve the Information Security Management System (ISMS). Monitor organisational compliance with ISO 27001:2022, ISO 27018:2019, SSAE 18 / ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2. Undertake project tasks and improvements for new system implementations and/or process improvement projects. Identify opportunities for improvements in security controls, tools and processes. Contribute to the analysis and mitigation of risks. Audit and Compliance Create clear documentation for regulatory requirements. Support internal and external audits and regulatory inspections. Compile evidence for internal and external audits. Required experience /qualifications Bachelor's degree from a top university Knowledge of data protection regulations (GDPR, CCPA, etc.) Understanding of information security principles and practices Experience with compliance methodologies and audit procedures Strong analytical and problem-solving abilities Excellent documentation and reporting skills Ability to communicate complex requirements to various stakeholders Detail-oriented with strong organisational skills Minimum 2 years experience in related roles Preferred experience /qualifications Experience with governance, risk, and compliance (GRC) tools such as OneTrust Experience in a regulated industry Understanding of information security frameworks (ISO 27001, NIST, etc.) and assurance reports Use of ticketing systems, preferably Jira Experience with knowledge management platforms, preferably Confluence What we’ll do for you Support you in flexible hybrid 25 days’ annual leave plus bank holidays and flexible cultural days Pension contribution match up to 6% Provide private health insurance and access to private 24/7 online GP Support you with enhanced maternity, paternity and adoption leave with family-friendly policies Provide Income protection Provide Life, disability and worldwide travel insurance Offer interest free loans of up to £10,000 after probation period Offer Gympass given access to a range of health and wellbeing gyms, classes and apps About Alfa We bring our industry-leading software platform to the likes of Mercedes-Benz and CarMax, so they can do business globally. Supporting all types of auto, equipment and wholesale finance business, our software platform uses a modern technology stack to deliver proven functionality and performance. Our customers use Alfa Systems for the full lifecycle, from point of sale, through originations, to contract management and remarketing. Alfa Systems manages complex leases and loans, in any region, language and currency in a highly available, high-throughput system. Culture Our culture is vibrant, innovative and diverse, and we are proud of it. Ours is a close-knit community. Alfa employees are an eclectic mix and all are creative, talented and hardworking. We think it is important to build close working relationships within our company, so we hold numerous team events and conferences that bring us together for socialising and team building. We all enjoy the work-life balance and the great culture, with plenty of social activities organised by the company.