GRC Security Analyst: ISO 27001, SOC 2 & PCI DSS

Starling; Manchester; Hybrid; GBP 45,000 - 60,000; Full time

Job summary

A leading fintech company in Manchester is seeking a compliance-focused individual to enhance their governance, risk, and compliance program. The ideal candidate will have at least 3 years in information security, with proven expertise in ISO 27001, SOC 2, and PCI DSS compliance. Join a dynamic team that values innovation and diversity, while enjoying a hybrid working model. Exceptional benefits including generous holiday allowance and private medical insurance are included.

Benefits

33 days holiday

Extra birthday holiday

Annual leave purchase/sell

16 hours paid volunteering time

Company enhanced pension scheme

Life insurance

Private Medical Insurance

Incentives refer-a-friend scheme

Perkbox membership

Access to Cycle to Work initiative

Qualifications

• A minimum of 3 years of experience in an information security role.
• Proven experience in supporting compliance efforts for ISO 27001, SOC 2, and PCI DSS.
• Experience with audit processes and evidence collection.

Responsibilities

• Support the day-to-day management of compliance programs.
• Act as a liaison for auditors, helping to gather evidence.
• Participate in the risk assessment process.

Skills

Compliance Management

Audit Support

Risk Management

Strong security metrics and reporting skills

Proactive, organised, detail-oriented

Education

Experience in information security

Tools

GRC software

Job description

A leading fintech company in Manchester is seeking a compliance-focused individual to enhance their governance, risk, and compliance program. The ideal candidate will have at least 3 years in information security, with proven expertise in ISO 27001, SOC 2, and PCI DSS compliance. Join a dynamic team that values innovation and diversity, while enjoying a hybrid working model. Exceptional benefits including generous holiday allowance and private medical insurance are included.