Job Title: Cyber Compliance Policy Analyst
Location: Any Hub
Contract and working pattern: Hybrid, permanent
Are you ready to Be Your Best Barr None?
Lets Grow!!!
We are all about Being Your Best Barr None and having a career with real Moments that Matter!
Employing around 950 people across the UK, we are proud to be a responsible business that takes care of our people, values diversity, gives something back to our communities and works to minimise our environmental impact.
For 150 years AG Barr has been building great brands and is home to some of the nations favourite flavours.
At our core is IRN-BRU, launched in 1901 and still going strong today, the vibrant RUBICON fruit based brand, Boost making every moment better with a caffeine kick, hydration hit or tasty treat, and FUNKIN where real fruit means authentic taste.
We also have a number of exciting owned brands within our portfolio including MOMA, which crafts quality oats into great tasting oat drinks and porridges.
There's never been a better time to join us!
What we’re looking for…
As a Cyber Compliance & Policy Analyst, you will ensure AG Barr meets its legal and regulatory obligations, driving compliance across our cyber and data protection domains. We are looking for a methodical professional to take specific ownership of our UK GDPR and NIS2 compliance frameworks, alongside our cyber security policy library. In this role, you won't just track checkboxes - you will be the vital link that translates complex regulatory requirements into actionable internal policies, while coordinating independent penetration testing to robustly assure AG Barr's security posture.
Your responsibilities will include…
- Own UK GDPR & NIS2 compliance within the Digital and Technology function, keeping registers current and audit-ready.
- Support data security breach governance and maintain incident procedures, ensuring seamless readiness alongside our Legal team to meet the ICO's 72-hour notification window.
- Maintain the cyber security policy library, updating frameworks to align with evolving regulations.
- Drive policy adoption across the business, working with HR to track employee awareness and manage exceptions.
- Coordinate the penetration testing programme, managing vendor procurement, scoping, and logistics.
- Track vulnerability remediation by logging test findings in our risk management tool, Optro, and ensuring swift closure by technical teams.
What you’ll bring...
- Compliance experience managing regulatory programmes for UK GDPR and at least one other cyber/data regulation.
- Working knowledge of NIS2 security obligations and UK GDPR requirements (including DPIAs and breach responses).
- Policy writing skills, with the ability to translate technical security requirements into clear employee guidance.
- Penetration test coordination experience, including scoping tests and tracking technical findings to resolution.
- Experience utilising GRC software or audit tracking platforms (Optro or equivalent) to log, assign, and track technical vulnerabilities and remediation progress through to closure.
- A methodical mindset with the discipline to track obligations and maintain accurate compliance documentation.
And it would also be great if you can demonstrate:
- Relevant certifications such as BCS Data Protection Practitioner, CIPP/E, or ISO 27001 Lead Implementer.
- Stakeholder management skills to collaborate effectively across Legal, HR, external providers, and regulators.
What we offer…
We believe in creating a diverse and inclusive culture where your voice can be heard. Our skilled, loyal and committed people are critical to the future success of AG Barr which is why we are continually investing in our employees to develop their talent.
We look after our employees by offering a competitive salary and benefits package which includes;
- Uncapped bonus linked to business performance
- Defined contribution Pension
- Up to 34 days holiday (depending on shift pattern)
- Flexible holiday trading
- Flexible cash pot to spend on benefits
- Healthcare Cash Plan
- Flexible benefits e.g. discounts & cashbacks, gym memberships, technology purchases etc
- Life assurance
- Save as you earn scheme
- Staff sales discount
- Free AG Barr products throughout your working day and staff sales
- Annual salary review
- Ongoing professional development and access to Learning and Development programmes and content
And much more!
To find out more about what it is like to work for AG Barr, please visit our careers platform here.
We are an equal opportunities employer and happy to discuss any reasonable adjustments that may be needed for successful candidates with a disability, health or mental health condition.
While we have highlighted our ideal requirements for this role, we are realistic that the successful candidate probably won't meet every single requirement in this advert, but we are big advocates of people growing in role. So even if you don’t meet every single requirement, we encourage you to submit an application - you may be just what we are looking for! Apply now!
Speculative CVs from agencies will not be accepted.
Please note, we may close vacancies early where we receive significant numbers of applications, so apply now!
Skills Required
- Compliance experience managing regulatory programmes for UK GDPR and at least one other cyber/data regulation
- Working knowledge of NIS2 security obligations and UK GDPR requirements (including DPIAs and breach responses)
- Policy writing skills to translate technical security requirements into clear employee guidance
- Penetration test coordination experience, including scoping tests and tracking technical findings to resolution
- Experience utilising GRC software or audit tracking platforms (Optro or equivalent) to log and track vulnerabilities
- A methodical mindset with discipline to track obligations and maintain accurate compliance documentation
- Relevant certifications such as BCS Data Protection Practitioner, CIPP/E, or ISO 27001 Lead Implementer
- Stakeholder management skills to collaborate across Legal, HR, external providers, and regulators
What We Do
We are a UK-based branded multi beverage business that is ambitious and value driven, with strong consumer focus,. We are brand owners and builders, offering a diverse and differentiated portfolio of brands that people love. The company was established over 145 years ago in Scotland. At our core is the Barr Soft Drinks division, home to some of the UK’s most loved soft drinks brands. Whether it’s the iconic IRN-BRU, launched in 1901 and still going strong today, the vibrant RUBICON fruit based brand or the unique range of BARR flavours, Barr Soft Drinks’ brands offer people a choice of great tasting products and bring exciting innovation to the market, available across multiple channels. Our FUNKIN business operates within the exciting and growing cocktail market. Real fruit means authentic taste and FUNKIN believes that to shake the best cocktail you have to use the best ingredients. That’s why they use the best fruit to create their premium products, famous amongst top bartenders. Now the UK’s number 1 cocktail brand FUNKIN provides innovative and unique purées, syrups, mixers and ready to drink cocktails, for behind the bar and at home. Our BOOST business is always looking for new trends and to appeal to the evolving tastes of drinkers. Proud to offer an exciting range of flavours across several functional drinks categories - Energy Stimulation, Sport and Iced Coffee - BOOST enjoys a very strong position within the UK independent retail channel and has an exclusive sales and distribution partnership with the fruit drinks brand RIO. MOMA uses a blend of the highest quality wholegrain jumbo oats that give its oat drinks a full-bodied flavour and its porridge a distinctively creamy texture. MOMA believes in crafting simple, natural ingredients into food and drink that tastes. AG Barr’s simple, effective and profitable business model - making, moving, marketing and selling - is supported by strong partnerships, talented people and responsible actions.
