Security and Compliance Officer

Think Cyber; Greater London; Remote; GBP 42,000 - 65,000; Full time

Benefits offered by this job

Competitive salary

25 days annual leave + bank holidays

1 day off for your birthday

Fully remote UK

Company pension scheme

Private Healthcare + mental health

Annual eye tests + glasses allowance

Job summary

Redflags is seeking an ambitious Security and Compliance Officer to mature our ISMS, privacy governance, and cyber risk framework. You will oversee IT partners, conduct audits and ensure CE+ and IASME compliance while enabling secure Microsoft 365 administration.

Ideal candidates have 2–5 years in information security, GRC, and risk management, with experience in ISO 27001 audits and compliance automation tools like Vanta.

Qualifications

• 2–5 years in information security, compliance, GRC, or risk management.
• Hands-on ISO 27001 audits, CE+, and IASME knowledge.
• Experience with compliance automation platforms and Microsoft 365 security management.

Responsibilities

• Maintain and mature the ISMS, privacy and cyber governance.
• Prepare security metrics, risk reports and dashboards for senior management.
• Oversee IT partners, system hardening, patching and vulnerability remediation.
• Handle customer security questionnaires and RFP sections.

Skills

Information security

GRC

ISO 27001

CE+

IASME

Vanta

Microsoft 365

Risk management

Audit reporting

Communication

Tools

Vanta

Microsoft 365 security

Job description

This position is remote but only open to candidates that live in the UK - we are not able to provide any work visas

About Redflags

Redflags is an award-winning cybersecurity software platform using behavioural science to deliver real-time security awareness. Recognised by the Computing Security Excellence Awards 2026 and TechUK Cyber Innovator Award, we empower organisations to manage cyber risk by building secure habits. As a high-growth, remote-first business, we foster an agile, autonomous, and close-knit culture.

Role Purpose

We are seeking an ambitious, early-career Security and Compliance Officer to help mature our Information Security Management System (ISMS). You will assume day-to-day ownership of information security, privacy and cyber governance while maintaining enough technical knowledge to confidently oversee IT partners and work within Microsoft 365 administration environments.

Key Responsibilities

• Governance, Compliance & ISMS: Maintain and improve the ISMS alongside the Data Protection and Security Officer. Manage policies, track risk registers, coordinate internal/external audits, and maintain Cyber Essentials Plus (CE+) and IASME Level 2 certifications.
• Board & Leadership Reporting: Assist in preparing security metrics, risk position reports, and compliance dashboards for senior management and the Board.
• Technical Security Support: Undertake technical tasks to strengthen security posture, including system hardening, patch management, endpoint protection, logging, and vulnerability remediation.
• Sales & Customer Assurance: Own customer security questionnaires, due diligence requests, and RFP security sections. Maintain a library of standard responses, policies, and certifications.

Candidate Profile & Key Skills

• Experience: 2-5 years in information security, compliance, GRC, or risk management.
• Standards & Audit: Hands-on experience with ISO 27001 audits, Cyber Essentials Plus (CE+), and the IASME assessment framework. Understanding of privacy principles, regulations and implementation.
• Tools: Experience with compliance automation platforms (e.g. Vanta) and Microsoft 365 security management.
• Mindset: High-agency self-starter who thrives in a scaling, agile environment and proactively drives initiatives with minimal supervision.
• Communication: Able to translate complex security requirements for technical teams, leadership, and external clients in questionnaires or RFPs.

Company Benefits

• Competitive salary, including share options
• 25 days annual leave + bank holidays
• 1 day off for your birthday
• Fully remote working in the UK
• Company pension scheme
• Private Healthcare (with 24/7 virtual GP service & mental health support)
• Annual eye tests and £75 contribution towards glasses
  This role requires candidates to have eligibility to work within the UK.