Security & Compliance Specialist

RedCloud Technology, Ltd.; City of London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading technology firm in London is seeking a Security & Compliance Specialist to manage compliance programs and IT controls. You will work closely with various teams and play a critical role in ensuring regulatory compliance while fostering a culture of security. Excellent communication skills and experience in risk assessment are essential. The role offers competitive benefits including enhanced annual leave and private healthcare.

Benefits

25 Days Annual leave

Enhanced Company Pension

Healthcare Cashplan

Private Healthcare

Life Insurance

Stock / Equity

Qualifications

• Proven experience in a Security Compliance, risk, or technical role.
• Strong understanding of GDPR regulations.
• Experience in evaluating IT controls.
• Excellent communication skills for technical concepts.

Responsibilities

• Manage and refine the Security & Compliance program.
• Facilitate risk review sessions with teams.
• Own vendor risk assessment process.
• Prepare for external audits against frameworks.

Skills

Security Compliance

Data protection principles

IT risk assessments

Vendor risk management

Communication skills

Problem-solving mindset

Familiarity with ISO 27001

Job description

About RedCloud

We are revolutionizing B2B commerce by delivering scalable, innovative solutions that empower businesses to grow and thrive in a competitive landscape. Our AI powered platform streamlines logistics, payments, and supply chain operations, making it easier for companies to connect, transact, and succeed. With a diverse and dynamic team, we’re committed to driving impact, fostering collaboration, and shaping the future of global trade.

The Role

RedCloud Technology is looking for a Security & Compliance Specialist to join our core security team. This is a critical role responsible for managing and maturing our IT compliance program, ensuring we meet our regulatory obligations and protect the data of our company and our customers. Working alongside our security engineers, you will be the go-to expert for IT controls, vendor risk, and data protection.

This role is ideal for a proactive IT professional who enjoys being a bridge between technical teams and compliance requirements. You will not be just checking boxes, you will be a trusted partner to the business, helping teams understand their obligations and implementing practical, effective solutions. You will play a key part in fostering a culture where security and compliance are seen as business enablers.

Key Responsibilities

• You will manage and mature our existing Security & Compliance program. This includes refining policies and procedures, tracking our compliance posture, and developing security and compliance awareness training for employees.
• You will facilitate regular risk review sessions with technical and business teams to identify and assess potential risks. You will be responsible for defining, documenting, and monitoring the effectiveness of our IT controls.
• You will own our third-party vendor risk assessment process from start to finish, evaluating the security and compliance posture of new and existing vendors to ensure they meet our standards.
• You will act as a key point of contact for external audits and help the business prepare for assessments against frameworks like ISO 27001 and SOC 2.
• You will help manage our compliance with data privacy regulations, particularly GDPR, by conducting data protection impact assessments and advising the business on data handling best practices.
• You will work closely with our Engineering, Product, Legal, and business teams to provide practical compliance advice and ensure requirements are integrated into our processes and systems.
• Stay current with evolving regulations and best practices in areas like AI. You will help shape the company’s approach to AI governance by identifying risks and establishing responsible usage policies.

What We're Looking For

• Proven experience in a Security Compliance, risk, or technical role (e.g. IT audit, system administration, security operations).
• A strong understanding of data protection principles and regulations, especially GDPR.
• Experience conducting IT risk assessments and evaluating the design and effectiveness of IT controls.
• Familiarity with the vendor due diligence and third-party risk management lifecycle.
• Excellent communication skills, with the ability to explain complex technical and compliance concepts to non-technical stakeholders.
• A collaborative, problem-solving mindset with high attention to detail.
• Familiarity with security frameworks like ISO 27001/27701. SOC 2 is a plus but not required.

Even if you don’t meet every requirement, we still encourage you to apply. Your unique experiences and perspectives might be just what we’re looking for.

Benefits

• 25 Days Annual leave, increasing to 26 days after 12 months in the business
• Enhanced Company Pension (Matched up to 5% & Salary Sacrifice)
• Healthcare Cashplan with Medicash
• Private Healthcare
• Life Insurance with AIG
• Happl, our benefit platform which provides access to pre-negotiated discounts on a wide variety of services including entertainment, food, and fitness.
• Stock / Equity

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.