Remote-First IT Security & Compliance Lead – London

B Corporation; Greater London; Hybrid; GBP 57,000 - 70,000; Full time

Benefits offered by this job

20 vacation days

25 days after 3 years

Medical and dental insurance

Life insurance

Pension

Global travel insurance

Flexible work environment

PD budget

Job summary

B Lab is seeking an IT Security & Compliance Lead to own security governance for the global network. You will conduct audits, set baselines, manage policy and incident response, and support cross-border data protection.

The role collaborates with engineering, product and regional admins to raise the security posture. The position is London-based, with a remote-first setup and requirements to reside in the UK or NL at start.

Qualifications

• 3+ years in information security, IT governance, risk and compliance (GRC).
• Strong networking/cybersecurity knowledge and regulatory compliance.
• Experience with security audits and vendor security reviews.
• Familiarity with GDPR, LGPD, and cross-border data protection.
• Experience developing incident response and business continuity plans.
• Hands-on with cloud and SaaS security, including IAM.
• Ability to explain security risk clearly to non-technical colleagues.

Responsibilities

• Security governance, audits and risk assessments across network systems and processes.
• Define and maintain a security baseline aligned to frameworks (e.g., ISO 27001).
• Coordinate external penetration testing and third-party risk reviews.
• Manage access control standards across core platforms (G Workspace, Salesforce).
• Own information security policy set and staff awareness programs (KnowBe4).
• Lead incident response planning and post-incident reviews.
• Support data protection compliance (GDPR, LGPD) across regions.

Skills

Information security

GRC

Security audits

Risk assessments

Cloud security

SaaS security

Data protection laws

Incident response

Policy writing

Tools

Google Workspace

Salesforce

KnowBe4

Google Vault

Job description

B Lab is seeking an IT Security & Compliance Lead to own security governance for the global network. You will conduct audits, set baselines, manage policy and incident response, and support cross-border data protection.

The role collaborates with engineering, product and regional admins to raise the security posture. The position is London-based, with a remote-first setup and requirements to reside in the UK or NL at start.