Cyber Compliance Policy Analyst

Job Title: Cyber Compliance Policy Analyst Location: Any Hub Contract and working pattern: Hybrid, permanent

Are you ready to Be Your Best Barr None?

Lets Grow!!!

We are all about Being Your Best Barr None and having a career with real Moments that Matter! Employing around 950 people across the UK, we are proud to be a responsible business that takes care of our people, values diversity, gives something back to our communities and works to minimise our environmental impact. For 150 years AG Barr has been building great brands and is home to some of the nations favourite flavours. At our core is IRN-BRU, launched in 1901 and still going strong today, the vibrant RUBICON fruit based brand, Boost making every moment better with a caffeine kick, hydration hit or tasty treat, and FUNKIN where real fruit means authentic taste. We also have a number of exciting owned brands within our portfolio including MOMA, which crafts quality oats into great tasting oat drinks and porridges. There's never been a better time to join us! What we’re looking for… As a Cyber Compliance & Policy Analyst, you will ensure AG Barr meets its legal and regulatory obligations, driving compliance across our cyber and data protection domains. We are looking for a methodical professional to take specific ownership of our UK GDPR and NIS2 compliance frameworks, alongside our cyber security policy library. In this role, you won't just track checkboxes - you will be the vital link that translates complex regulatory requirements into actionable internal policies, while coordinating independent penetration testing to robustly assure AG Barr's security posture.

Your responsibilities will include… Own UK GDPR & NIS2 compliance within the Digital and Technology function, keeping registers current and audit-ready. Support data security breach governance and maintain incident procedures, ensuring seamless readiness alongside our Legal team to meet the ICO's 72-hour notification window. Maintain the cyber security policy library, updating frameworks to align with evolving regulations. Drive policy adoption across the business, working with HR to track employee awareness and manage exceptions. Coordinate the penetration testing programme, managing vendor procurement, scoping, and logistics. Track vulnerability remediation by logging test findings in our risk management tool, Optro, and ensuring swift closure by technical teams. What you’ll bring... Compliance experience managing regulatory programmes for UK GDPR and at least one other cyber/data regulation. Working knowledge of NIS2 security obligations and UK GDPR requirements (including DPIAs and breach responses). Policy writing skills, with the ability to translate technical security requirements into clear employee guidance. Penetration test coordination experience, including scoping tests and tracking technical findings to resolution. Experience utilising GRC software or audit tracking platforms (Optro or equivalent) to log, assign, and track technical vulnerabilities and remediation progress through to closure. A methodical mindset with the discipline to track obligations and maintain accurate compliance documentation.