Remote GRC & Security Lead - ISO 27001 / GDPR

Be-IT Ltd; Glasgow; Remote; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Remote-first role across the UK

Long-term incentive eligibility

Personal development budget ~£1.5k per

Top-spec hardware provided

BUPA healthcare, life insurance, and +

Job summary

Be-IT Ltd is seeking a Security & Compliance Manager (GRC) to own and drive information security, data protection and regulatory compliance across the business. This remote UK-based role offers strategic influence and cross-functional collaboration to scale our security program as we enter new markets.

You will lead ISO 27001 certification, govern GDPR/CCPA compliance, manage third-party risk and partner with commercial teams to streamline security requirements in negotiations.

Qualifications

• Proven experience in a GRC or info-sec role within a tech company.
• ISO 27001 certification expertise essential for ongoing certification.
• Global data protection compliance experience including GDPR/CCPA.
• Ability to navigate complex security and compliance negotiations with commercial teams.
• Experience managing third-party supplier risk across the supply chain.
• Familiarity with AWS cloud and application security principles.
• Fast-moving environment with strong communication and documentation skills.

Responsibilities

• Own and maintain security and compliance documentation across information security programs.
• Lead ISO 27001 certification efforts, including audits and improvements.
• Manage data protection compliance programs in line with GDPR/CCPA globally.
• Partner with commercial teams to negotiate security/compliance aspects and standardize processes.
• Own third-party supplier risk management and mitigation.
• Contribute to implementing frameworks like NIST, FedRAMP as the business scales.
• Streamline onboarding, security reviews and compliance workflows via better docs and processes.

Skills

GRC experience

Information security

ISO 27001 implementation

Vendor risk management

Regulatory compliance (GDPR/CCPA)

Cloud security (AWS)

Communication skills

Education

ISO 27001 Lead Implementer/Lead Auditor

Degree in Computer Science / Information Security / Cybersecurity / Data Protection / Risk

CISSP or CompTIA Security+

Tools

AWS

DevSecOps

NIST, HIPAA, FedRAMP, DORA

Job description

Be-IT Ltd is seeking a Security & Compliance Manager (GRC) to own and drive information security, data protection and regulatory compliance across the business. This remote UK-based role offers strategic influence and cross-functional collaboration to scale our security program as we enter new markets.

You will lead ISO 27001 certification, govern GDPR/CCPA compliance, manage third-party risk and partner with commercial teams to streamline security requirements in negotiations.