GRC Analyst, EMEA — Security & Compliance

Georgian; United Kingdom; Remote; GBP 67,000 - 79,000; Full time

Job summary

Chainguard is seeking a Security Engineer focused on Governance, Risk & Compliance (EMEA) to support audit readiness for SOC 2 Type II and ISO 27001, coordinate evidence, and improve our compliance program. This early-career, hands-on role offers cross-functional collaboration across Security, Legal, HR, and Product, with mentoring and growth opportunities.

You’ll help maintain policies, controls, and documentation while learning Chainguard’s security systems and practices in a dynamic,

Qualifications

• 2+ years of experience in information security, GRC, compliance, audit, risk, IT, or related field.
• Experience supporting audits, control activities, risk assessments, security questionnaires, or compliance programs.
• Strong organizational and project coordination skills.
• Clear written and verbal communication across technical and non-technical stakeholders.
• Structured documentation, evidence management, and follow-through.
• Curiosity about security controls and willingness to learn.
• Comfort with spreadsheets and GRC platforms.

Responsibilities

• Support audit readiness activities for SOC 2 Type II, ISO 27001, and other security assurance initiatives.
• Coordinate evidence collection with teams across Security, Engineering, Legal, HR, Product, and other functions.
• Help maintain security policies, standards, procedures, control descriptions, and supporting documentation.
• Assist with control testing, risk assessments, gap analysis, and remediation tracking.
• Keep compliance and risk information accurate and up to date in GRC platforms such as Vanta.
• Help translate auditor, customer, and internal security requests into clear next steps for the right stakeholders.
• Track action items, follow up on dependencies, and communicate status, risks, and blockers clearly.
• Identify opportunities to simplify and improve GRC workflows through better documentation, automation, and use of modern tooling.
• Develop and maintain repeatable processes, checklists, runbooks, and evidence‑collection practices.
• Support customer security reviews, questionnaires, and third‑party risk activities as needed.
• Learn Chainguard’s systems and security practices well enough to ask useful questions, identify inconsistencies, and elevate potential risks with clear context.
• Partner with senior members of the Security and Governance, Risk & Compliance teams on projects that improve Chainguard’s security posture.

Skills

Information security

GRC

Compliance

Audit support

Risk management

Project coordination

Communication

Tools

Vanta

Drata

Job description

Chainguard is seeking a Security Engineer focused on Governance, Risk & Compliance (EMEA) to support audit readiness for SOC 2 Type II and ISO 27001, coordinate evidence, and improve our compliance program. This early-career, hands-on role offers cross-functional collaboration across Security, Legal, HR, and Product, with mentoring and growth opportunities.

You’ll help maintain policies, controls, and documentation while learning Chainguard’s security systems and practices in a dynamic,