Security & Compliance Specialist Technology (Product, Engineering, Design) · London ·

RedCloud Technology, Ltd.; London; On-site; GBP 50,000 - 70,000; Full time

Job summary

A leading eCommerce provider in London is seeking a Security & Compliance Specialist. This role is pivotal in ensuring regulatory compliance and data protection through managing the IT compliance program. You will collaborate with various teams to implement best practices while staying ahead of evolving regulations. The ideal candidate has a strong background in security compliance and risk management, along with excellent communication skills.

Benefits

25 Days Annual Leave

Enhanced Company Pension

Healthcare Cashplan

Private Healthcare

Life Insurance

Access to Employee Benefit Platform

Stock / Equity

Qualifications

• Proven experience in a SecurityCompliance, risk, or technical role.
• Strong understanding of data protection principles and regulations.
• Experience conducting IT risk assessments.

Responsibilities

• Manage and mature the existing Security & Compliance program.
• Conduct risk review sessions with technical and business teams.
• Own the third-party vendor risk assessment process.

Skills

Security Compliance

Risk Assessment

Data Protection

Vendor Risk Management

Communication Skills

Detail-Oriented

Job description

About RedCloud

We are revolutionizing B2B commerce by delivering scalable, innovative solutions that empower businesses to grow and thrive in a competitive landscape. Our AI powered platform streamlines logistics, payments, and supply chain operations, making it easier for companies to connect, transact, and succeed. With a diverse and dynamic team, we’re committed to driving impact, fostering collaboration, and shaping the future of global trade.

RedCloud Technology is looking for a Security &Compliance Specialist to join our core security team. This is a critical role responsible for managing and maturing our IT compliance program, ensuring we meet our regulatory obligations and protect the data of our company and our customers. Working alongside our security engineers, you will be the go-to expert for IT controls, vendor risk, and data protection.

This role is ideal for a proactive IT professional who enjoys being a bridge between technical teams and compliance requirements. You will not be just checking boxes, you will be a trusted partner to the business, helping teams understand their obligations and implementing practical, effective solutions. You will play a key part in fostering a culture where security and compliance are seen as business enablers.

Key Responsibilities:

• You will manage and mature our existing Security &Compliance program. This includes refining policies and procedures, tracking our compliance posture, and developing security and compliance awareness training for employees.
• You will facilitate regular risk review sessions with technical and business teams to identify and assess potential risks. You will be responsible for defining, documenting, and monitoring the effectiveness of our IT controls.
• You will own our third-party vendor risk assessment process from start to finish, evaluating the security and compliance posture of new and existing vendors to ensure they meet our standards.
• You will act as a key point of contact for external audits and help the business prepare for assessments against frameworks like ISO 27001 and SOC 2.
• You will help manage our compliance with data privacy regulations, particularly GDPR, by conducting data protection impact assessments and advising the business on data handling best practices.
• You will work closely with our Engineering, Product, Legal, and business teams to provide practical compliance advice and ensure requirements are integrated into our processes and systems.
• Stay current with evolving regulations and best practices in areas like AI. You will help shape the company’s approach to AI governance by identifying risks and establishing responsible usage policies.

What We're Looking For:

• Proven experience in a SecurityCompliance, risk, or technical role (e.g. IT audit, system administration, security operations).
• A strong understanding of data protection principles and regulations, especially GDPR.
• Experience conducting IT risk assessments and evaluating the design and effectiveness of IT controls.
• Familiarity with the vendor due diligence and third-party risk management lifecycle.
• Excellent communication skills, with the ability to explain complex technical and compliance concepts to non-technical stakeholders.
• A collaborative, problem-solving mindset with high attention to detail.
• Familiarity with security frameworks like ISO 27001/27701. SOC 2 is a plus but not required.

Even if you don’t meet every requirement, we still encourage you to apply. Your unique experiences and perspectives might be just what we’re looking for.

Benefits

Working with a pioneering provider of eCommerce solutions you will have the opportunity to join an international company who are growing massively, we encourage ambition and creativity.

Plus, you will get:

• 25 Days Annual leave, increasing to 26 days after 12 months in the business
• Enhanced CompanyPension (Matched up to 5% & Salary Sacrifice)
• Healthcare Cashplan with Medicash
• Private Healthcare
• Life Insurance with AIG
• Happl, our benefit platform which provides access to pre-negotiated discounts on a wide variety of services including entertainment, food, and fitness.
• Stock / Equity

Check out the links below to see what our CEO Justin Floyd has to say about our plans for growth for the year ahead, and to see our latest video on the mission we’re on!

RedCloud I We're growing!

RedCloud I Red101 App I Open Commerce