Key Skills

• SolidExperience with implementing one or more security automation platforms (e.g. Thoropass, Vanta, Drata, Secureframe)
• Experience with automating SOC 2 compliance
• Experience with interacting with corporate customers in a business-to-business setting
• Excellent communication and collaboration skills.
• Experience interacting with auditors

What You Will Do

• Design and manage GRC tools, evidence collection workflows, and vendor risk processes
• Support responses to customer security assessments and RFPs
• Collaborate with cross-functional teams to align security with product, legal, and customer trust requirements
• Track, measure, and report on control effectiveness and risk posture
• Lead and manage audits, internal readiness assessments, and third-party risk processes
• Automate and operationalize the compliance roadmap (e.g., SOC 2, ISO 27001)
• For new compliance standards identify gaps and help drive

What You Bring To The Table

• 8+ years in compliance roles
• A systems-thinking mindset and a drive to eliminate manual, repetitive compliance tasks.
• Experience building compliance programs that scale with speed and minimal overhead.
• Proven experience implementing or supporting compliance frameworks such as SOC 2 or ISO 27001
• Hands-on experience with GRC platforms and automating compliance workflows.
• Excellent communication and documentation skills.

Nice To Have Skills

• Experience deploying and scaling GRC tooling in early-stage environments
• Familiarity with customer trust programs and security questionnaire automation
• Experience with AI compliance and governance

We value diversity and are committed to equal employment opportunity regardless of sex, race, religion, ethnicity, nationality, disability, age, sexual orientation or gender identity. We strongly encourage individuals from groups traditionally underrepresented in tech to apply. To help make a change, we sponsor bright women from disadvantaged backgrounds through their university degrees in science and mathematics.

We collect diversity and inclusion data solely for the purpose of monitoring the effectiveness of our equal opportunities policies and ensuring compliance with UK employment and equality legislation. This information is confidential, used only in aggregate form, and will not influence the outcome of your application.