GRC Security Analyst, EMEA — Remote + Equity

Chainguard; United Kingdom; Remote; GBP 67,000 - 79,000; Full time

Benefits offered by this job

Flexible & Remote-First Culture

Stock options

100% Health Insurance

Time Off

Parental Leave

Job summary

Chainguard is seeking a Security Engineer specializing in Governance, Risk & Compliance (EMEA). This early-career role supports SOC 2 Type II, ISO 27001, and other audits, helping maintain evidence, controls, and remediation across Security, Legal, HR, and Product teams.

You’ll grow in a collaborative, fast-moving environment, learning Chainguard’s security posture and contributing to simpler, automated, repeatable GRC processes across regions.

Qualifications

• 2+ years of information security, GRC, compliance, audit, risk, IT, or related field.
• Experience supporting audits, control activities, risk assessments, security questionnaires, or compliance programs.
• Strong organizational and project coordination skills across multiple streams.
• Clear written and verbal communication for technical and non-technical stakeholders.
• Structured documentation, evidence management, and follow-through.
• Curiosity about security controls and willingness to learn.

Responsibilities

• Support audit readiness activities for SOC 2 Type II, ISO 27001, and other security initiatives.
• Coordinate evidence collection with Security, Engineering, Legal, HR, Product, and other teams.
• Maintain security policies, standards, and control documentation.
• Assist with control testing, risk assessments, gap analysis, and remediation tracking.
• Keep GRC information accurate in platforms like Vanta or Drata.
• Translate requests into actionable next steps for stakeholders.
• Track actions, dependencies, risks, and blockers.
• Improve GRC workflows via better documentation and tooling.
• Develop runbooks and evidence-collection practices.
• Support customer security reviews and third-party risk activities.

Skills

GRC fundamentals

Audit support

Documentation

Cross-functional coordination

Security tooling

Automation interest

Tools

Vanta

Drata

Job description

Chainguard is seeking a Security Engineer specializing in Governance, Risk & Compliance (EMEA). This early-career role supports SOC 2 Type II, ISO 27001, and other audits, helping maintain evidence, controls, and remediation across Security, Legal, HR, and Product teams.

You’ll grow in a collaborative, fast-moving environment, learning Chainguard’s security posture and contributing to simpler, automated, repeatable GRC processes across regions.