Enterprise Security GRC Manager — Trust & Compliance Lead

Propel; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Market-leading compensation

Share options

Private healthcare

25 days holiday

Enhanced parental leave

L&D budget

Job summary

Propel is seeking a Security GRC Manager to own the security compliance programme end to end in a high-growth B2B SaaS environment. You will drive ISO 27001, SOC 1/2, HIPAA and future frameworks with a hands-on approach across controls, evidence and customer interactions.

London-based, Monday to Thursday in the office, you will coordinate audits, lead customer security reviews, build trust portals and translate compliance into commercial value while maturing security, privacy and risk across

Qualifications

• 4+ years in GRC, security compliance, trust, audit, information security or related area.
• Hands-on with frameworks such as SOC 2, ISO 27001, HIPAA or GDPR.
• Experience supporting enterprise sales, procurement, RFPs or customer security reviews.
• Experience using AI to improve GRC workflows, such as policy drafting or evidence management.

Responsibilities

• Own the security compliance programme across ISO 27001, SOC 1, SOC 2, HIPAA and future frameworks
• Run audit cycles throughout the year and coordinate external auditors and internal control owners
• Own controls, evidence, policies, risk registers, access reviews, vendor reviews and business continuity processes
• Lead customer-facing security reviews, questionnaires, RFPs and enterprise diligence
• Build and maintain trust collateral, security portals and reusable questionnaire answer libraries
• Work closely with Product and Engineering to translate compliance requirements into practical controls
• Use AI to improve and automate areas such as policy drafting, evidence management and questionnaire responses
• Help improve the maturity of security, privacy, risk and customer trust as the business moves further upmarket
• Apply strong risk judgement and focus teams on meaningful security improvements rather than compliance theatre

Skills

GRC management

Security compliance

Audit coordination

Customer reviews

Policy drafting

Risk assessment

AI in GRC

Job description

Propel is seeking a Security GRC Manager to own the security compliance programme end to end in a high-growth B2B SaaS environment. You will drive ISO 27001, SOC 1/2, HIPAA and future frameworks with a hands-on approach across controls, evidence and customer interactions.

London-based, Monday to Thursday in the office, you will coordinate audits, lead customer security reviews, build trust portals and translate compliance into commercial value while maturing security, privacy and risk across