Senior Trust Security Analyst

Responsibilities

We are representing a confidential software organization seeking a Senior Trust Security Analyst to serve as the primary security and trust liaison for UK Sovereign government customers. This is a critical customer-facing role at the intersection of security, compliance, and customer success.

You will own responses to customer security inquiries and questionnaires, supporting contract reviews on security and privacy terms while acting as a trusted advisor on security posture. Your responsibilities include:

• Serving as the primary point of contact for UK Sovereign customers on security posture, vulnerabilities, remediation activities, and trust documentation
• Managing end-to-end responses to security questionnaires including SIG, CAIQ, VSA, MoD/UK government questionnaires, and bespoke enterprise formats
• Responding to inbound customer security inquiries, translating technical controls into clear business language for both technical and non-technical stakeholders
• Maintaining customer-facing documentation, security whitepapers, certifications, and standard responses
• Collaborating with technical and engineering teams to assess current security posture of UK Sovereign environments
• Tracking vulnerability remediation status in a structured Plan of Action and Milestones (POA&M) format
• Preparing and delivering monthly security status updates to UK Sovereign customers, including remediation progress and key security metrics
• Monitoring remediation activities across engineering and security teams, ensuring alignment with agreed timelines and compliance requirements
• Reading and interpreting third-party audit reports (SOC 2 Type II, ISO 27001, penetration test summaries) and representing findings to customers
• Participating in security review meetings, capturing feedback and action items, and ensuring timely follow-up by technical teams

What We're Looking For

Required qualifications:

• UK citizenship and ability to pass and maintain SC clearance
• 5+ years in a security, GRC, trust, or technical customer-facing role, with direct ownership of security questionnaires, customer inquiries, and security reporting
• Hands-on experience responding to SIG, CAIQ, VSA, and bespoke enterprise/government security questionnaires
• Working knowledge of Cyber Essentials Plus, ISO 27001, SOC 2 Type II, and at least one of: PCI DSS, GDPR/UK GDPR, HIPAA, or FedRAMP
• Strong technical understanding of security principles including access control, encryption, incident response, network security, and secure SDLC
• Familiarity with cloud infrastructure (AWS, Azure, or GCP) and SaaS security models
• Exceptional written and verbal communication skills with proven ability to translate complex technical controls for non-technical audiences
• Proven experience in customer-facing roles within security or technology sectors, ideally including regulated or government customers
• Demonstrated ability to manage high-volume workloads, set priorities, and drive multi-stakeholder responses to deadline
• Bachelor's degree in a relevant field, or equivalent practical experience
• Proven ability to handle confidential customer and company information with integrity and discretion

Preferred qualifications:

• Professional cybersecurity certifications (CISSP, CISM, CISA, CCSK, ISO 27001 Lead Auditor, Security+)
• Experience working with UK Sovereign, MoD, or UK government environments
• Familiarity with POA&M processes and structured vulnerability remediation reporting
• Experience with trust portal platforms (ServiceNow, Whistic, Vanta Trust, Drata Trust)
• Familiarity with AI/ML security and emerging frameworks (NIST AI RMF, ISO 42001)
• Previous leadership or line management experience
• Fast learner with demonstrated ability to self-educate on new technologies and evolving security frameworks

How We Work with You

Our talent team at Get A Job.ai partners with leading organizations to connect exceptional candidates with career-defining opportunities. When you apply through our platform, a dedicated recruiter will review your qualifications and conduct an initial screening. If there's a strong match, we'll submit your profile directly to our client for consideration.

Please apply exclusively through Get A Job.ai. Do not contact the client organization directly, as this may disqualify your application.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Equal Employment Opportunity: Get A Job.ai is committed to fostering an inclusive hiring process. We welcome applications from qualified candidates of all backgrounds and ensure fair consideration regardless of race, color, religion, national origin, age, sex, marital status, physical or mental disability, veteran status, gender identity, or sexual orientation.