Senior GRC & Security Lead (SOC 2 Focus)

Preply; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Health insurance

Equity

Job summary

Preply is seeking a Senior GRC Analyst to join our Cybersecurity team in London. You will shape and scale our governance, risk, and compliance program, driving SOC 2 Type 2 readiness and privacy initiatives while collaborating with Legal, Engineering, and Product teams.

The role focuses on risk assessments, policy development, and cross‑functional governance to support business growth. This is a hybrid role within a fast‑growing tech company.

Qualifications

• 5+ years in GRC, risk management, compliance, or cybersecurity—preferably in a tech or SaaS environment.

Responsibilities

• Maintain and continuously improve the risk management framework.
• Lead enterprise risk assessments and track KRIs for leadership.
• Manage third‑party risk and conduct vendor reviews.
• Help shape governance, policy, and security/compliance initiatives.
• Drive SOC 2 Type 2 compliance with potential ISO 27001 expansion.
• Support privacy initiatives and data retention policies.
• Bridge Cybersecurity, Legal and Engineering to implement regulations.
• Champion security culture across the company.
• Automate GRC operations using AI tools where possible.

Skills

GRC

Risk management

Compliance

Cybersecurity

SOC 2

ISO 27001

ISO 27701

PCI DSS

GDPR

CCPA

Job description

Preply is seeking a Senior GRC Analyst to join our Cybersecurity team in London. You will shape and scale our governance, risk, and compliance program, driving SOC 2 Type 2 readiness and privacy initiatives while collaborating with Legal, Engineering, and Product teams.

The role focuses on risk assessments, policy development, and cross‑functional governance to support business growth. This is a hybrid role within a fast‑growing tech company.