Security Risk and Compliance Management Specialist V – UK

Overview

As Security Risk and Compliance Management Specialist, you drive the global information security program and risk posture. You design and execute IT risk and compliance assessments, policies, and control frameworks across the enterprise. You guide risk identification, remediation, and communication to executives and control partners. You collaborate with business units to implement compliant, secure processes and support audits and regulatory examinations. You contribute to trust and regulatory initiatives in a mission-critical AI environment.

Pay / Benefits

• Competitive compensation
• Annual bonus or incentives
• Equity awards
• Employee Stock Purchase Plan (ESPP)

Responsibilities

• Lead cross-functional strategy and implementation of risk and compliance solutions
• Perform complex, independent work assignments and problem resolution
• Serve as SME ensuring regulatory, legal, and policy compliance across documents, projects, and products
• Oversee risk management programs and assist business units in risk identification, evaluation, and communication
• Provide data and analytics to risk officers and committees
• Direct root-cause analysis and develop compliant solutions
• Develop risk assessment processes, charters, policies, methodologies, and reports
• Lead cross-functional workgroups and planning to align business and IT risk objectives
• Develop executive-level risk data communications and analytics
• Create training and communications on information security, IT risk, and compliance
• Maintain knowledge of regulatory landscape and business challenges
• Coordinate regulatory requirements, examinations, and vendor/third-party due diligence
• Conduct risk assessments and document deviations from policies or standards
• Ensure remediation plans align with business objectives and drive corrective actions
• Provide SME input on security, privacy, and regulatory topics to Sales, Legal, Policy, and product teams
• Analyze risk ratings and appetite, delivering data-driven summaries to leaders
• Document findings and deviations from testing
• Support policy discussions with policymakers and industry bodies
• Provide feedback to product management on trust-related features
• Develop internal control testing and update control matrices
• Adapt processes and reporting metrics as environments change
• Coordinate internal control owners and external auditors through kickoff, interviews, and evidence gathering
• Execute internal customer audits and present compliance portfolios with Account Managers
• Adhere to security policies and assist with annual industry-specific audits (ISO, SOC, PCI, HIPAA, GDPR, etc.)
• Conduct annual audits for GDPR, FEDRAM, CDSA

Key requirements

• Expert-level knowledge of PCI, ISO27001, Audit Standard #70, Safe Harbor, HIPPA and FISMA
• Expert-level knowledge of IT Risk Management, Governance, Risk and Compliance, Information Security, Data Privacy, Vendor Management, and Business Continuity Management

• Cross-functional collaboration
• Strong communication with senior leaders
• Analytical mindset and problem solving
• IT Risk Management
• Governance, Risk and Compliance (GRC)
• Information Security

…