Platform Security & Compliance Lead — AWS, SOC 2

MRP-Global; Greater London; Hybrid; GBP 110,000 - 140,000; Full time

Job summary

MRP-Global is seeking a Platform Security & Compliance Lead in London with hands-on AWS security expertise. You will own security across the platform, from IAM and networking to CI/CD and supply chain security, reporting to the CTO.

Collaboration with engineering and governance functions is essential to balance security with growth. You will shape security governance, drive SOC 2 and GDPR initiatives, and engage with enterprise customers on security reviews and due diligence.

Qualifications

• Deep hands-on experience securing production AWS environments, across IAM, networking, containers and databases.
• Experience securing CI/CD pipelines and software supply chains.
• Solid understanding of vulnerability management and incident response.
• Ability to make sensible, commercial risk decisions and work autonomously with engineering teams.

Responsibilities

• Own the security posture of production AWS environment (IAM, VPC, Secrets Manager, ECS, Aurora).
• Manage identity and access across the business, including Cloudflare Zero Trust.
• Embed security in the engineering lifecycle from threat modelling to secure development practices.
• Oversee CI/CD security, build provenance, and container security.
• Lead SOC 2 programme including controls, evidence gathering and audits.
• Ensure UK GDPR and PECR compliance, DPAs, processing records and privacy requirements.
• Support customer security reviews, vendor assessments and security due diligence.
• Manage the full security incident lifecycle including response and post-incident actions.

Skills

IAM

Networking

Containers

Databases

Vulnerability management

Incident response

CI/CD security

Risk management

Autonomous working

Tools

Terraform

Cloudflare Zero Trust

AWS

Job description

MRP-Global is seeking a Platform Security & Compliance Lead in London with hands-on AWS security expertise. You will own security across the platform, from IAM and networking to CI/CD and supply chain security, reporting to the CTO.

Collaboration with engineering and governance functions is essential to balance security with growth. You will shape security governance, drive SOC 2 and GDPR initiatives, and engage with enterprise customers on security reviews and due diligence.