GRC Security Analyst: ISO 27001, SOC 2 & PCI DSS

Starling Bank; Cardiff; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A prominent banking technology firm located in Cardiff is seeking a Governance, Risk and Compliance (GRC) Specialist to enhance their compliance management systems. The ideal candidate will have over 3 years of experience in information security, focusing on ISO 27001 and SOC 2 compliance. This position offers a hybrid working model and a range of benefits, including generous holiday entitlement and private medical insurance. Join us to help shape the future of banking technology!

Benefits

33 days holiday including public holidays

Extra day off for your birthday

Annual leave increase with length of service

16 hours paid volunteering time

Private Medical Insurance with VitalityHealth

Qualifications

• At least 3 years of experience in an information security role.
• Proven experience in compliance management for ISO 27001, SOC 2, and PCI DSS.
• Strong skills in audit processes and evidence collection.

Responsibilities

• Support day-to-day management of compliance programs.
• Act as a liaison for internal and external auditors.
• Help identify and document information security risks.
• Develop and maintain information security policies.

Skills

Security metrics

Compliance management

Audit support

Risk management

Cross-functional collaboration

Education

Professional certifications (e.g., CompTIA Security+)

Tools

GRC software

Job description

A prominent banking technology firm located in Cardiff is seeking a Governance, Risk and Compliance (GRC) Specialist to enhance their compliance management systems. The ideal candidate will have over 3 years of experience in information security, focusing on ISO 27001 and SOC 2 compliance. This position offers a hybrid working model and a range of benefits, including generous holiday entitlement and private medical insurance. Join us to help shape the future of banking technology!