Key Responsibilities:

• Prepare and manage compliance audits including SOC 1, SOC 2, ISO 27001, and similar frameworks
• Support clients with security questionnaires, risk assessments, policies, and compliance requirements
• Provide guidance on information security best practices and regulatory requirements
• Manage compliance projects and audit activities from planning through to completion
• Conduct vendor assessments and monitor third-party compliance standards
• Coordinate security awareness initiatives, including phishing simulations and training programs
• Oversee penetration testing processes and ensure remediation of identified vulnerabilities
• Perform regular access reviews and support access management controls
• Create and maintain compliance documentation, policies, and procedures
• Collaborate with internal teams to drive continuous improvements in security and compliance processes

Requirements:

• Bachelor's Degree in Information Systems, Computer Science, Engineering, Business, Accounting, Law, or a related field
• Minimum 2 years' experience in Technology Risk, Compliance, Governance, Risk & Compliance (GRC), Information Security, or a similar role
• Proven experience managing compliance audits and certification projects (SOC 1, SOC 2, ISO 27001, etc.)
• Experience responding to security and vendor questionnaires
• Strong project management and organisational skills
• Ability to manage multiple priorities and meet deadlines
• Self-motivated with a solutions-driven mindset and strong communication skills

Advantageous:

• Knowledge of UK GDPR, EU GDPR, or other privacy and security frameworks
• Relevant information security or compliance certifications
• Experience within a SaaS, fintech, or technology-driven environment

This is an excellent opportunity for someone looking to develop their career in information security and compliance while working in a fast-paced, collaborative, and innovative environment.