Skip to content

GRC

Security and Compliance Officer

Redflags logoRedflagsRemote in United KingdomFull-timePosted 1w ago
Apply on Redflags (shows the role here)Redflags as an employer: salaries and roles

The full posting

This position is remote but only open to candidates that live in the UK - we are not able to provide any work visas

About Redflags

Redflags is an award-winning cybersecurity software platform using behavioural science to deliver real-time security awareness. Recognised by the Computing Security Excellence Awards 2026 and TechUK Cyber Innovator Award, we empower organisations to manage cyber risk by building secure habits. As a high-growth, remote-first business, we foster an agile, autonomous, and close-knit culture.

Role Purpose

We are seeking an ambitious, early-career Security and Compliance Officer to help mature our Information Security Management System (ISMS). You will assume day-to-day ownership of information security, privacy and cyber governance while maintaining enough technical knowledge to confidently oversee IT partners and work within Microsoft 365 administration environments.

Key Responsibilities

  • Governance, Compliance & ISMS: Maintain and improve the ISMS alongside the Data Protection and Security Officer. Manage policies, track risk registers, coordinate internal/external audits, and maintain Cyber Essentials Plus (CE+) and IASME Level 2 certifications.
  • Board & Leadership Reporting: Assist in preparing security metrics, risk position reports, and compliance dashboards for senior management and the Board.
  • Technical Security Support: Undertake technical tasks to strengthen security posture, including system hardening, patch management, endpoint protection, logging, and vulnerability remediation.
  • Sales & Customer Assurance: Own customer security questionnaires, due diligence requests, and RFP security sections. Maintain a library of standard responses, policies, and certifications.

Candidate Profile & Key Skills

  • Experience: 2–5 years in information security, compliance, GRC, or risk management.
  • Standards & Audit: Hands-on experience with ISO 27001 audits, Cyber Essentials Plus (CE+), and the IASME assessment framework. Understanding of privacy principles, regulations and implementation.
  • Tools: Experience with compliance automation platforms (e.g. Vanta) and Microsoft 365 security management.
  • Mindset: High-agency self-starter who thrives in a scaling, agile environment and proactively drives initiatives with minimal supervision.
  • Communication: Able to translate complex security requirements for technical teams, leadership, and external clients in questionnaires or RFPs.

Company Benefits

  • Competitive salary, including share options
  • 25 days annual leave + bank holidays
  • 1 day off for your birthday
  • Fully remote working in the UK
  • Company pension scheme
  • Private Healthcare (with 24/7 virtual GP service & mental health support)
  • Annual eye tests and £75 contribution towards glasses This role requires candidates to have eligibility to work within the UK.

Where you can be based

This position is 100% remote and open to applicants based in United Kingdom.

Text as Redflags published it; last compared with the original on 13 Nov 2026.

Apply on Redflags (shows the role here)

The employer: Redflags

Redflags sells security awareness software that nudges staff away from risky behaviour in real time, and is hiring a Security and Compliance Officer.

Pay and benefits: Full-time, early-career staff role, remote and filed under London.

Full postings from Redflags All Redflags openings on the board Redflags employer profile

Other security roles worth a look

Led audits or a certification programme?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Redflags posts a security role

We read Redflags's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.