Security & Compliance Program Lead

Duvo; United Kingdom; Remote; GBP 90,000 - 120,000; Full time

Job summary

Duvo is seeking a sole-occupant Security & Governance role responsible for owning the Q&A library, evidence, audits and vendor risk processes. You’ll drive the customer security review workflow, ensure accurate, auditable outputs, and coordinate with Security, Engineering and Legal as needed.

You will lead SOC 2 Type II renewal, ISO 27001/ISO 42001 surveillance, and related compliance tasks, maintaining the trust center and policy lifecycle in a fast-paced environment.

Qualifications

• You’ve run a certification programme end to end.
• You write answers that survive a hostile reviewer.
• Third-party risk in practice.
• Evidence discipline.
• Judgement about escalation.
• You use AI tooling properly.
• Plain writing.

Responsibilities

• Own the Q&A library – mapped to ISO 27001, SOC 2, ISO 42001, NIS2 and GDPR, with owners, approvals and review dates.
• Handle customer security reviews and ensure documented evidence is accurate and updates flow back to the library.
• Lead the audit and certification programme including SOC 2 Type II, ISO 27001, ISO 42001, and NIS2 surveillance.
• Maintain ISMS/AIMS artifacts and drive risk reviews, policy lifecycle, and access controls in collaboration with Security Lead.
• Manage third‑party and subprocessor risk, vendor policy intake, due diligence and updates.

Skills

Certification program

Evidence writing

Vendor risk

Audits & compliance

Escalation judgement

AI tooling usage

Plain writing

Job description

Duvo is seeking a sole-occupant Security & Governance role responsible for owning the Q&A library, evidence, audits and vendor risk processes. You’ll drive the customer security review workflow, ensure accurate, auditable outputs, and coordinate with Security, Engineering and Legal as needed.

You will lead SOC 2 Type II renewal, ISO 27001/ISO 42001 surveillance, and related compliance tasks, maintaining the trust center and policy lifecycle in a fast-paced environment.