Junior Information Security & GRC Analyst

Starling; Greater London; Hybrid; GBP 32,000 - 52,000; Full time

Benefits offered by this job

33 days holiday

Birthday day off

Volunteer time

Pension salary sacrifice

Life insurance

Private Medical Insurance

Perkbox

EV leasing

Job summary

Engine by Starling is seeking a GRC professional to help maintain governance, risk, and compliance across ISO 27001, SOC1, SOC2, CSTAR, and PCI DSS/3DS. You will liaise with auditors, support risk assessments, and help implement security controls with Engineering and Security Operations.

A hybrid work setup is offered, with opportunities for growth within a fast-scaling fintech ecosystem. The role emphasizes hands-on risk management, policy upkeep, evidence collection, and ongoing security

Qualifications

• Minimum 1 year in information security role.
• Experience supporting compliance programs.

Responsibilities

• Manage day-to-day governance, risk and compliance activities.
• Assist audits and evidence gathering.
• Help maintain information security policies and procedures.
• Collaborate with Engineering, Product and Security teams.
• Support vendor risk assessments and third-party reviews.
• Contribute to security awareness training.

Skills

Compliance management

Audit support

Risk management

Policy maintenance

Evidence collection

Cross-functional collaboration

Continuous improvement

Security awareness

Third-party risk

GRC software

Security metrics

Stakeholder engagement

Tools

GRC software

Job description

Engine by Starling is seeking a GRC professional to help maintain governance, risk, and compliance across ISO 27001, SOC1, SOC2, CSTAR, and PCI DSS/3DS. You will liaise with auditors, support risk assessments, and help implement security controls with Engineering and Security Operations.

A hybrid work setup is offered, with opportunities for growth within a fast-scaling fintech ecosystem. The role emphasizes hands-on risk management, policy upkeep, evidence collection, and ongoing security