Security and Compliance Officer

Job not on LinkedIn

🕒 September 24

🇬🇧 United Kingdom – Remote

💵 £40k - £50k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

👻 Ghost score 5%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Redflags

WebsiteAll Job Openings

- employees

🔒 Cybersecurity

☁️ SaaS

👥 HR Tech

Cybersecurity • SaaS • HR Tech

Redflags is a human cyber risk management platform that measures and reduces human-driven security incidents through on-device behavioural telemetry, real-time nudges, and bite-sized microlearning. It gives visibility into AI tool usage, phishing risk, data egress and cyber hygiene, intercepts risky actions at the point of decision, and reports measurable behaviour change and risk reduction. Deployed as a lightweight enterprise platform, Redflags emphasizes intelligent, pre-emptive interventions and analytics to demonstrate operational impact for security, compliance, and HR stakeholders.

📋 Description

• Maintain and improve the Information Security Management System (ISMS) alongside the Data Protection and Security Officer • Manage policies and track risk registers • Coordinate internal and external audits • Maintain Cyber Essentials Plus (CE+) and IASME Level 2 certifications • Prepare security metrics, risk position reports, and compliance dashboards for senior management and the Board • Undertake technical security tasks including system hardening, patch management, endpoint protection, logging, and vulnerability remediation • Own customer security questionnaires, due diligence requests, and RFP security sections • Maintain a library of standard responses, policies, and certifications • Oversee IT partners and work within Microsoft 365 administration environments

🎯 Requirements

• 2–5 years in information security, compliance, GRC, or risk management • Hands-on experience with ISO 27001 audits • Experience with Cyber Essentials Plus (CE+) • Experience with the IASME assessment framework • Understanding of privacy principles, regulations and implementation • Experience with compliance automation platforms such as Vanta • Experience with Microsoft 365 security management • Ability to translate complex security requirements for technical teams, leadership, and external clients in questionnaires or RFPs • Eligibility to work within the UK • High-agency self-starter able to thrive in a scaling, agile environment and proactively drive initiatives with minimal supervision

🏖️ Benefits

• Share options • 25 days annual leave plus bank holidays • 1 day off for your birthday • Fully remote working in the UK • Company pension scheme • Private Healthcare with 24/7 virtual GP service and mental health support • Annual eye tests • £75 contribution towards glasses

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume