Security and Compliance Officer

Think Cyber Security Ltd.; City Of London; À distance; GBP 40 000 - 65 000; Plein temps

Avantages offerts par ce poste

Competitive salary

25 days annual leave + bank holidays

1 day off for your birthday

Fully remote working in the UK

Company pension scheme

Private Healthcare with 24/7 virtualGP

Annual eye tests and glasses allowance

Résumé du poste

Redflags is a remote-first cybersecurity software platform based in the UK, seeking an early-career Security and Compliance Officer. You will own information security, privacy and governance, interfacing with IT partners and Microsoft 365 environments.

You will mature the ISMS, prepare dashboards for leadership, and lead responses to customer security requests, audits, and certifications.

Qualifications

• 2-5 years in information security, compliance, GRC, or risk management.
• Hands-on ISO 27001 audits, CE+, and IASME assessment framework.
• Understanding of privacy principles, regulations and implementation.
• Experience with compliance automation platforms (e.g. Vanta) and Microsoft 365 security management.
• High-agency self-starter who thrives in scaling, agile environments.

Responsabilités

• Governance, Compliance & ISMS: Maintain and improve the ISMS; manage policies and audits; maintain CE+ and IASME Level 2.
• Board & Leadership Reporting: Prepare security metrics and risk dashboards for senior management and the Board.
• Technical Security Support: System hardening, patching, endpoint protection, logging and vulnerability remediation.
• Sales & Customer Assurance: Manage security questionnaires, due diligence requests, and RFP security sections.

Connaissances

InfoSec governance

ISMS

Audit compliance

Microsoft 365 security

Risk communication

Outils

Vanta

IASME

Description du poste

This position is remote but only open to candidates that live in the UK - we are not able to provide any work visas.

About Redflags

Redflags is an award-winning cybersecurity software platform using behavioural science to deliver real-time security awareness. Recognised by the Computing Security Excellence Awards 2026 and TechUK Cyber Innovator Award, we empower organisations to manage cyber risk by building secure habits. As a high-growth, remote-first business, we foster an agile, autonomous, and close-knit culture.

Role Purpose

We are seeking an ambitious, early-career Security and Compliance Officer to help mature our Information Security Management System (ISMS). You will assume day-to-day ownership of information security, privacy and cyber governance while maintaining enough technical knowledge to confidently oversee IT partners and work within Microsoft 365 administration environments.

Key Responsibilities

• Governance, Compliance & ISMS: Maintain and improve the ISMS alongside the Data Protection and Security Officer. Manage policies, track risk registers, coordinate internal/external audits, and maintain Cyber Essentials Plus (CE+) and IASME Level 2 certifications.
• Board & Leadership Reporting: Assist in preparing security metrics, risk position reports, and compliance dashboards for senior management and the Board.
• Technical Security Support: Undertake technical tasks to strengthen security posture, including system hardening, patch management, endpoint protection, logging, and vulnerability remediation.
• Sales & Customer Assurance: Own customer security questionnaires, due diligence requests, and RFP security sections. Maintain a library of standard responses, policies, and certifications.

Candidate Profile & Key Skills

• Experience: 2-5 years in information security, compliance, GRC, or risk management.
• Standards & Audit: Hands-on experience with ISO 27001 audits, Cyber Essentials Plus (CE+), and the IASME assessment framework. Understanding of privacy principles, regulations and implementation.
• Tools: Experience with compliance automation platforms (e.g. Vanta) and Microsoft 365 security management.
• Mindset: High-agency self-starter who thrives in a scaling, agile environment and proactively drives initiatives with minimal supervision.
• Communication: Able to translate complex security requirements for technical teams, leadership, and external clients in questionnaires or RFPs.

Company Benefits

• Competitive salary, including share options
• 25 days annual leave + bank holidays
• 1 day off for your birthday
• Fully remote working in the UK
• Company pension scheme
• Private Healthcare (with 24/7 virtual GP service & mental health support)
• Annual eye tests and £75 contribution towards glasses

This role requires candidates to have eligibility to work within the UK.