[Hiring] Security Compliance Specialist @TransFICC

Role Description

We are hiring to enhance our Security and Compliance efforts. In this role, you will work closely with Security Compliance, Senior Leadership, and Site Reliability Engineering to support our GRC initiatives.

Here’s what you’ll be doing:

• Stakeholder Communication and Reporting:
  • Respond to customer security questionnaires.
  • Produce management reports on security compliance and metrics for relevant committees.
• Contribute to and Improve Compliance Programmes:
  • Contribute to internal control evaluations and testing to ensure adherence.
  • Ensure compliance with industry standards such as GDPR, DORA, NIS2, ISO 27001, and SOC 2.
  • Coordinate responses to internal and external audits.
  • Support security assessments, including third-party penetration tests.
• Risk Management and Issue Resolution:
  • Contribute to the maintenance of the risk assessment process to identify, evaluate, and mitigate potential risks.
  • Triage security issues and provide recommended solutions.

Qualifications

• 4+ years of experience in security compliance, GRC, or infosec roles.
• Experience answering complex compliance questionnaires, ideally from Banks or highly regulated organisations.
• Experience in developing and implementing information security policies, standards, and procedures.
• Experience leading ISO27001 and SOC 2 certification processes.
• Familiarity with standards and frameworks such as ISO 27001, SOC 2, NIST CSF, as well as legal frameworks such as DORA, NIS2, and GDPR.

Requirements

• Bonus points if you have experience working with Vanta or similar GRC automation tools.
• Can comprehend penetration test and vulnerability scan results.
• Have startup experience or experience working in a fast-moving environment.
• Are comfortable using technical tools, CLIs, or basic scripting to improve compliance workflows.

Benefits

• Dependent on experience up to £75,000 + Shares + Benefits.