Senior Trust Security Analyst
A senior, customer-facing trust and security role serving as the primary security contact for NICE's UK Sovereign (government/regulated) customers: handling security questionnaires, translating audit findings and vulnerability data into customer-ready POA&M reports, and coordinating remediation with internal engineering teams. Requires UK citizenship and SC clearance eligibility.
- Compensation
- Not disclosed
- Location
- United Kingdom - London
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Contract
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- UK citizenship and ability to pass and maintain SC clearance
- 5+ years in a security, GRC, trust, or technical customer-facing role with ownership of security questionnaires, inquiries, and reporting
- Hands-on experience responding to SIG, CAIQ, VSA, and bespoke enterprise/government security questionnaires
- Working knowledge of Cyber Essentials Plus, ISO 27001, SOC 2 Type II, and at least one of PCI DSS, GDPR/UK GDPR, HIPAA, or FedRAMP
- Strong technical understanding of security principles, architecture, and vulnerability management (access control, encryption, incident response, network security, secure SDLC)
- Familiarity with cloud infrastructure (AWS, Azure, or GCP) and SaaS security models
- Exceptional written and verbal communication; ability to translate technical controls for non-technical audiences
- Customer-facing experience in security or technology sectors, ideally with regulated or government customers
- Ability to manage a high-volume queue, prioritize, and drive multi-stakeholder responses to deadline
- Bachelor's degree in a relevant field, or equivalent practical experience
- Proven ability to handle confidential customer and company information with integrity and discretion
Nice to have
- Professional cybersecurity certifications (CISSP, CISM, CISA, CCSK, ISO 27001 Lead Auditor, Security+)
- Experience working with UK Sovereign, MoD, or UK government environments
- Familiarity with POA&M processes and structured vulnerability remediation reporting
- Experience with trust portal platforms (ServiceNow, Whistic, Vanta Trust, Drata Trust)
- Familiarity with AI/ML security and emerging frameworks (NIST AI RMF, ISO 42001)
- Previous leadership or line management experience
Full description
At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you.
So what's the role all about?
The Senior Trust Analyst — UK Sovereign sits at the intersection of security, sales, and customer success, serving as the primary trust and security point of contact for our UK Sovereign customers. This role owns the response to customer security inquiries and questionnaires, supports contract reviews on security and privacy terms, and acts as a trusted advisor on the security posture of our UK Sovereign environments.
In addition to traditional Trust Analyst responsibilities, this role serves as the dedicated liaison between UK Sovereign technical security teams and customers, ensuring transparency, trust, and proactive communication. The Senior Trust Analyst will track and report vulnerability remediation activities in a structured Plan of Action and Milestones (POA&M) format, deliver regular security status updates, and translate complex technical information into clear, customer-ready communications.
This is a senior, customer-facing position critical to building and sustaining trust with UK government and regulated sector customers, accelerating deal cycles, and reinforcing the integrity of our UK Sovereign security program.
How will you make an impact?
Customer Trust & Security Engagement
- Trusted Advisor: Serve as the primary point of contact for UK Sovereign customers on all matters related to security posture, vulnerabilities, remediation activities, and trust documentation.
- Security Questionnaires: Support end-to-end responses to customer and prospect security questionnaires (SIG, CAIQ, VSA, MoD/UK government questionnaires, and bespoke enterprise formats), ensuring accurate, timely, and consistent answers tailored to UK Sovereign context.
- Responder: Help respond to inbound customer security inquiries via email and ticketing, translating technical controls into clear business language for both technical and non-technical stakeholders.
- Trust Portal & Documentation: Maintain the public trust center and UK Sovereign customer-facing documentation, ensuring security whitepapers, certifications, and standard responses remain current and reusable.
Security Posture & Vulnerability Reporting
- Security Posture Assessment: Collaborate closely with UK Sovereign technical and engineering teams to understand and assess the current security posture of UK Sovereign environments.