GRC Lead — ISO 27001 / SOC 2, Hybrid

Risk Ledger; Greater London; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

Risk Ledger is seeking a GRC Lead to own governance, risk and compliance. You will drive ISO 27001, SOC 2 and risk management across the business, partnering with engineers, sales and leadership to ensure evidence, reporting, and controls are effective and scalable.

This hands-on role requires you to manage audits, improve policies, and integrate compliance tooling, while influencing product direction and customer assurance efforts in a fast-growing SaaS environment.

Qualifications

• Hands-on GRC experience required.
• Experience maintaining ISO 27001 and SOC 2 audits.
• Experience in a startup or scale-up, B2B SaaS.
• Ability to turn risk data into actionable reports.
• Pragmatic, risk-based approach with ownership mindset.

Responsibilities

• Run ISO 27001 ISMS year-round and lead external audits, taking SOC 2 Type 1 to Type 2.
• Own enterprise risk management framework and risk register with clear leadership reporting.
• Lead our compliance tooling and move to an in-house solution within the year.
• Support customer assurance by answering security questionnaires and due diligence.
• Keep policies up to date and align supplier risk programme on Risk Ledger platform.

Skills

GRC experience

ISO 27001

SOC 2 audits

Risk management

B2B SaaS

AI & automation

Communication skills

Self-starter

Tools

GRC tooling

Automation platforms

Compliance tooling

Job description

Risk Ledger is seeking a GRC Lead to own governance, risk and compliance. You will drive ISO 27001, SOC 2 and risk management across the business, partnering with engineers, sales and leadership to ensure evidence, reporting, and controls are effective and scalable.

This hands-on role requires you to manage audits, improve policies, and integrate compliance tooling, while influencing product direction and customer assurance efforts in a fast-growing SaaS environment.