Hybrid GRC & Compliance Analyst

Starling; Manchester; Hybrid; GBP 30,000 - 46,000; Full time

Benefits offered by this job

Hybrid working

Pension scheme

Private medical insurance

Cycle to Work

Job summary

Engine by Starling is seeking a Governance, Risk and Compliance professional to help maintain and mature our program. You’ll work with stakeholders across Engineering, Product and Security Operations to embed controls and ensure regulatory alignment.

The role focuses on ISO 27001, SOC1/2, CSTAR, PCI DSS, audits, evidence collection, and continuous improvement, with hybrid working in Manchester and a supportive benefits package.

Qualifications

• Minimum 1 year of experience in an information security role.
• Proven experience in supporting and managing compliance efforts.
• Strong skills in security metrics and reporting.
• Experience with audit processes and evidence collection.
• Proactive, organised, and detail-oriented approach.
• Experience with GRC software is a plus.

Responsibilities

• Compliance Management: support day-to-day management of compliance programs (ISO 27001, SOC1, SOC2, CSTAR, PCI DSS/3DS).
• Audit Support: liaison for auditors, gather evidence, prepare for audits, track remediation.
• Risk Management: assist in risk assessment and treatment planning.
• Policy & Procedure Maintenance: update security policies and procedures.
• Evidence Collection & Review: streamline evidence gathering for audit readiness.
• Cross-Functional Collaboration: work with Engineering, Product and Security Ops.
• Continuous Improvement: identify efficiency opportunities in the GRC program.
• Security Awareness: assist in security training for all employees.
• Third-Party Risk Assessments: evaluate security posture of vendors.
• Team-oriented, proactive collaboration.

Skills

Security metrics

Audit processes

Evidence collection

Stakeholder engagement

Detail-oriented

Education

Foundational IT risk / audit certs

ISC2 Cybersecurity (CC)

ISO 27001 Foundation training

Job description

Engine by Starling is seeking a Governance, Risk and Compliance professional to help maintain and mature our program. You’ll work with stakeholders across Engineering, Product and Security Operations to embed controls and ensure regulatory alignment.

The role focuses on ISO 27001, SOC1/2, CSTAR, PCI DSS, audits, evidence collection, and continuous improvement, with hybrid working in Manchester and a supportive benefits package.