Junior Information Security & GRC Analyst

Starling Bank; London; Hybrid; NOK 528,000 - 818,000; Full time

Benefits offered by this job

33 days holiday

Birthday leave

Pension scheme

Life insurance

Private Medical Insurance

Perkbox membership

EV leasing

Job summary

Engine by Starling is seeking a governance, risk & compliance professional to help mature our GRC program. You will engage with stakeholders across engineering, product and security to ensure adherence to security standards and regulatory requirements.

The role emphasises hands-on implementation, audit coordination, and continuous improvement, with hybrid working across offices, and a focus on building trust with clients and partners.

Qualifications

• Minimum 1 year of experience in an information security role.
• Proven experience in supporting and managing compliance efforts.
• Strong skills in security metrics and reporting.
• Experience with audit processes and evidence collection.

Responsibilities

• Compliance Management: support day-to-day management of compliance programs (ISO 27001, SOC1, SOC2, CSTAR, PCI DSS/3DS).
• Audit Support: liaise with auditors, gather evidence, track remediation of findings.
• Risk Management: assist in risk assessments and in developing risk treatment plans.
• Policy & Procedure Maintenance: update security policies and procedures to stay current.
• Evidence Collection & Review: streamline evidence gathering for frameworks to ensure audit readiness.
• Cross‑Functional Collaboration: work with Engineering, Product and Security Operations teams to embed controls.
• Continuous Improvement: identify opportunities to improve the GRC program and related processes.
• Security Awareness: assist in delivering security training for all employees.
• Third‑Party Risk Assessments: evaluate vendor security posture to meet standards.

Skills

Compliance management

Audit support

Risk assessment

Policy development

Evidence collection

Cross-functional collaboration

Security awareness

GRC software

Attention to detail

Job description

Engine by Starling is seeking a governance, risk & compliance professional to help mature our GRC program. You will engage with stakeholders across engineering, product and security to ensure adherence to security standards and regulatory requirements.

The role emphasises hands-on implementation, audit coordination, and continuous improvement, with hybrid working across offices, and a focus on building trust with clients and partners.