Security and Compliance Officer

Think Cyber; City Of London; Remote; GBP 40.000 - 60.000; Vollzeit

Benefits dieser Stelle

Competitive salary

25 days annual leave + bank holidays

1 day off for your birthday

Fully remote working in the UK

Company pension scheme

Private Healthcare with 24/7 GP & MH支持

Annual eye tests and £75 glasses'

Zusammenfassung

Redflags, a remote-first cybersecurity software company, is seeking an early-career Security and Compliance Officer to own the ISMS, privacy, and governance within a UK-based environment. You will manage policies, audits, and third-party assessments while coordinating with IT partners in Microsoft 365 administration.

The role requires 2–5 years in information security or risk management, with hands-on ISO27001 audits, CE+ and IASME, plus experience with Vanta and Microsoft 365 security.

Qualifikationen

• 2–5 years in information security, compliance, or risk management.
• Hands-on ISO 27001 audits, CE+ and IASME frameworks.
• Experience with compliance automation platforms and Microsoft 365 security.
• Proactive, high-agency mindset in scaling and agile environments.
• Ability to translate security requirements to technical and non-technical audiences.

Aufgaben

• Governance, Compliance & ISMS: maintain and improve ISMS, manage policies, risk registers, audits, CE+ and IASME.
• Board reporting: prepare security metrics and compliance dashboards for leadership.
• Technical security: system hardening, patching, endpoint protection, logging, remediation.
• Sales & customer assurance: respond to questionnaires, due diligence, and RFPs with standard libraries.

Kenntnisse

InfoSec experience

ISO27001 audits

GRC / risk mgmt

Leadership comms

Tools

Vanta

Microsoft 365 Security

Jobbeschreibung

This position is remote but only open to candidates that live in the UK - we are not able to provide any work visas

About Redflags

Redflags is an award-winning cybersecurity software platform using behavioural science to deliver real-time security awareness. Recognised by the Computing Security Excellence Awards 2026 and TechUK Cyber Innovator Award, we empower organisations to manage cyber risk by building secure habits. As a high-growth, remote-first business, we foster an agile, autonomous, and close-knit culture.

Role Purpose

We are seeking an ambitious, early-career Security and Compliance Officer to help mature our Information Security Management System (ISMS). You will assume day-to-day ownership of information security, privacy and cyber governance while maintaining enough technical knowledge to confidently oversee IT partners and work within Microsoft 365 administration environments.

Key Responsibilities

• Governance, Compliance & ISMS: Maintain and improve the ISMS alongside the Data Protection and Security Officer. Manage policies, track risk registers, coordinate internal/external audits, and maintain Cyber Essentials Plus (CE+) and IASME Level 2 certifications.
• Board & Leadership Reporting: Assist in preparing security metrics, risk position reports, and compliance dashboards for senior management and the Board.
• Technical Security Support: Undertake technical tasks to strengthen security posture, including system hardening, patch management, endpoint protection, logging, and vulnerability remediation.
• Sales & Customer Assurance: Own customer security questionnaires, due diligence requests, and RFP security sections. Maintain a library of standard responses, policies, and certifications.

Candidate Profile & Key Skills

• Experience: 2-5 years in information security, compliance, GRC, or risk management.
• Standards & Audit: Hands-on experience with ISO 27001 audits, Cyber Essentials Plus (CE+), and the IASME assessment framework. Understanding of privacy principles, regulations and implementation.
• Tools: Experience with compliance automation platforms (e.g. Vanta) and Microsoft 365 security management.
• Mindset: High-agency self-starter who thrives in a scaling, agile environment and proactively drives initiatives with minimal supervision.
• Communication: Able to translate complex security requirements for technical teams, leadership, and external clients in questionnaires or RFPs.

Company Benefits

• Competitive salary, including share options
• 25 days annual leave + bank holidays
• 1 day off for your birthday
• Fully remote working in the UK
• Company pension scheme
• Private Healthcare (with 24/7 virtual GP service & mental health support)
• Annual eye tests and £75 contribution towards glasses
  This role requires candidates to have eligibility to work within the UK.