Security Compliance Specialist

We value skills from all industries, so for some roles,
no financial experience is required, although our values and ways of working should resonate with you. We are keen to continue to drive diversity within our team so welcome applications from candidates with varied backgrounds and protected characteristics.

Please Note - We do not accept unsolicited CVs from agencies as we already have an established PSL.

London

Full time

Remote

SRE

Location: Remote First; office location Moorgate, London (flexible remote working locations within UK/Europe)

Employment type: Permanent (open to contract as well)

Working Hours: Full-time (UK 9-6)

Salary: dependent on experience up to £75,000 + Shares + Benefits

We are hiring to enhance our Security and Compliance efforts. In this role, you will work closely with Security Compliance, Senior Leadership, and Site Reliability Engineering to support our GRC initiatives.

We provide a low-latency, high-throughput distributed messaging system to the e-trading Fixed-income markets. We are, foremost, a technology service provider and support for part of our customers’ trading infrastructure.

You will help maintain positive customer relationships by handling compliance questions and ensuring our security practices are effective and up to date.

Here’s what you’ll be doing:

Stakeholder Communication and Reporting: respond to customer security questionnaires and produce management reports on security compliance and metrics for relevant committees.

Contribute to and Improve Compliance Programmes: contribute to internal control evaluations and testing to ensure adherence. Ensure compliance with industry standards such as GDPR, DORA, NIS2, ISO 27001, and SOC 2. Coordinate responses to internal and external audits, and support security assessments, including third-party penetration tests.

Risk Management and Issue Resolution: contribute to the maintenance of the risk assessment process to identify, evaluate, and mitigate potential risks. Triage security issues and provide recommended solutions.

To be successful in this role, we require:

4+ years of experience in security compliance, GRC, or infosec roles

Experience answering complex compliance questionnaires, ideally from Banks or highly regulated organisations

Experience in developing and implementing information security policies, standards and procedures

Experience leading ISO
27001 and SOC 2 certification processes

Familiarity with standards and frameworks such as ISO 27001, SOC 2, NIST CSF, as well as legal frameworks such as DORA, NIS2, and GDPR

Have experience working with Vanta or similar GRC automation tools

Can comprehend penetration test and vulnerability scan results

Have startup experience or experience working in a fast-moving environment

Are comfortable using technical tools, CLIs, or basic scripting to improve compliance workflows