GRC Security Analyst — ISO 27001, SOC 2 & PCI DSS

Starling Bank; City of Westminster; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

A leading bank in the UK is seeking a governance and compliance specialist to ensure adherence to security standards like ISO 27001 and PCI DSS. This role involves managing compliance programs, supporting audits, and collaborating across teams to enhance security practices. Ideal candidates will have at least 3 years of information security experience and relevant certifications. The position offers a flexible hybrid work model, contributing to a rapidly growing technology-driven banking environment.

Benefits

33 days holiday including public holidays

Birthday leave

Flexible annual leave options

Paid volunteering time

Company-enhanced pension scheme

Life insurance and income protection

Private medical insurance with benefits

Family-friendly policies

Referral incentives

Perkbox membership

Cycle to Work scheme

Qualifications

• Minimum of 3 years experience in an information security role.
• Experience supporting compliance for ISO 27001, SOC 2, and PCI DSS.
• Strong skills in security metrics and reporting.

Responsibilities

• Support day-to-day management of compliance programs.
• Act as key liaison for internal and external auditors.
• Participate in risk assessment processes.

Skills

Information security expertise

Compliance management

Security metrics and reporting

Audit processes

Proactivity and detail orientation

GRC software experience

Education

CompTIA Security+

CISA

CRISC

CISSP

Job description

A leading bank in the UK is seeking a governance and compliance specialist to ensure adherence to security standards like ISO 27001 and PCI DSS. This role involves managing compliance programs, supporting audits, and collaborating across teams to enhance security practices. Ideal candidates will have at least 3 years of information security experience and relevant certifications. The position offers a flexible hybrid work model, contributing to a rapidly growing technology-driven banking environment.