Senior Security & Compliance Engineer (ISO 27001 / SOC 2)

Volta; Greater London; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Equity in Volta

Retirement/pension contributions

Comprehensive health benefits

Generous vacation days

Job summary

Volta is seeking a Senior Manager, Cyber Security Engineering to lead the ISO 27001 and SOC 2 Type II program across a fast-growing, security‑minded infrastructure platform. You will own controls, evidence, and ISMS documentation while collaborating with platform engineers and external auditors.

You’ll drive audit readiness, oversee risk assessments, and coordinate responses to customer security questionnaires and regulatory inquiries, shaping Volta’s security posture at scale.

Qualifications

• 3+ years in information security, with a meaningful part in compliance, GRC, or audit-facing work.
• Hands-on experience in ISO 27001 or SOC 2 programs, including preparing evidence and supporting external audits.
• Ability to read system designs and assess whether a control is real, engaging with engineers.

Responsibilities

• Implement and maintain controls for ISO 27001 and SOC 2 Type II programs, tracking status and gaps against certification timelines.
• Operate the GRC platform day to day, configure integrations, monitor checks, and resolve drift.
• Collect, organize, and quality-check evidence for auditors.
• Maintain ISMS documentation: policies, risk register, corrective actions.
• Support internal audit and management review with needed data and analysis.
• Prepare evidence packages and control walkthroughs before audits and support during fieldwork.
• Track findings to closure and verify corrective actions.
• Map security obligations in customer contracts to controls and draft consistent responses to questionnaires.
• Carry out risk assessments and vendor security reviews, maintain exception registers.
• Maintain regulatory records and reporting across footprint (GDPR related docs, NIS2 registrations).
• Work with platform engineers to translate control requirements into actionable work and automate evidence collection.

Skills

ISO 27001

SOC 2

GRC

Vanta

Audit support

Tools

Vanta

Drata

Job description

Volta is seeking a Senior Manager, Cyber Security Engineering to lead the ISO 27001 and SOC 2 Type II program across a fast-growing, security‑minded infrastructure platform. You will own controls, evidence, and ISMS documentation while collaborating with platform engineers and external auditors.

You’ll drive audit readiness, oversee risk assessments, and coordinate responses to customer security questionnaires and regulatory inquiries, shaping Volta’s security posture at scale.