GRC Security Analyst — ISO27001, SOC 2 & PCI

Starling; Cardiff; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading financial services provider in Cardiff is seeking an Information Security professional to enhance their governance, risk, and compliance program. The role involves compliance management, audit support, and cross-functional collaboration. Ideal candidates will have over 3 years of experience and expertise in ISO 27001, SOC 2, and PCI DSS compliance. This position offers a competitive benefits package including generous holiday allowances and wellness programs.

Benefits

33 days holiday including public holidays

Extra holiday for your birthday

Annual leave increase with length of service

16 hours paid volunteering time

Qualifications

• Minimum of 3 years of experience in an information security role.
• Proven experience in managing compliance for ISO 27001, SOC 2, PCI DSS.
• Strong skills in security metrics and reporting.

Responsibilities

• Support day-to-day management of compliance programs.
• Act as liaison for audits and track remediation of findings.
• Participate in risk assessment and document information security risks.

Skills

Information security

Compliance management

Risk assessment

Audit processes

Organized approach

Tools

GRC software

Job description

A leading financial services provider in Cardiff is seeking an Information Security professional to enhance their governance, risk, and compliance program. The role involves compliance management, audit support, and cross-functional collaboration. Ideal candidates will have over 3 years of experience and expertise in ISO 27001, SOC 2, and PCI DSS compliance. This position offers a competitive benefits package including generous holiday allowances and wellness programs.