Remote Security & Compliance Lead (GRC | ISO27001/SOC 2)

Transficc Limited; Greater London; Remote; GBP 68,000 - 83,000; Full time

Benefits offered by this job

Shares

Benefits

Job summary

Transficc Limited is seeking a Security Compliance professional to enhance our GRC program. You will work with Security Compliance, Senior Leadership, and Site Reliability Engineering to support our GRC initiatives.

Responsibilities include stakeholder communication, reporting on security compliance metrics, developing and improving policies, and guiding ISO27001 and SOC 2 certification efforts within a fast-moving tech environment. Remotely flexible UK/Europe.

Qualifications

• 4+ years of experience in security compliance, GRC, or infosec roles.
• Experience answering complex compliance questionnaires, ideally from Banks or highly regulated organisations.
• Experience developing and implementing information security policies, standards and procedures.
• Experience leading ISO27001 and SOC 2 certification processes.
• Familiarity with ISO 27001, SOC 2, NIST CSF, as well as legal frameworks such as DORA, NIS2, and GDPR.

Responsibilities

• Stakeholder communication and reporting: respond to customer security questionnaires and produce management reports on security compliance and metrics for relevant committees.
• Contribute to and improve compliance programmes: contribute to internal control evaluations and testing to ensure adherence. Coordinate responses to internal and external audits, and support security assessments, including third-party penetration tests.
• Risk management and issue resolution: contribute to the maintenance of the risk assessment process to identify, evaluate, and mitigate potential risks.

Job description

Transficc Limited is seeking a Security Compliance professional to enhance our GRC program. You will work with Security Compliance, Senior Leadership, and Site Reliability Engineering to support our GRC initiatives.

Responsibilities include stakeholder communication, reporting on security compliance metrics, developing and improving policies, and guiding ISO27001 and SOC 2 certification efforts within a fast-moving tech environment. Remotely flexible UK/Europe.