Security and Compliance Officer
At Think Cyber · London, Greater London, United Kingdom
- Security
- Full-time
See how well you match Match me reads your CV and picks the jobs that suit you best.
Get jobs like this within hours Radar emails you new jobs open to you within hours of us finding them, before most people see them.
Where you can work from
Open to the United Kingdom
“London, Greater London, United Kingdom”
From the location.
Report a mistake
- Posted
- 6 November 2026
- First seen by us
- 7 November 2026
- Last checked
- 19 hours ago
Job description
From Think Cyber’s job post, as they wrote it.
This position is remote but only open to candidates that live in the UK - we are not able to provide any work visas
About Redflags
Redflags is an award-winning cybersecurity software platform using behavioural science to deliver real-time security awareness. Recognised by the Computing Security Excellence Awards 2026 and TechUK Cyber Innovator Award, we empower organisations to manage cyber risk by building secure habits. As a high-growth, remote-first business, we foster an agile, autonomous, and close-knit culture.
Read the full description
Role Purpose
We are seeking an ambitious, early-career Security and Compliance Officer to help mature our Information Security Management System (ISMS). You will assume day-to-day ownership of information security, privacy and cyber governance while maintaining enough technical knowledge to confidently oversee IT partners and work within Microsoft 365 administration environments.
Key Responsibilities
* Governance, Compliance & ISMS: Maintain and improve the ISMS alongside the Data Protection and Security Officer. Manage policies, track risk registers, coordinate internal/external audits, and maintain Cyber Essentials Plus (CE+) and IASME Level 2 certifications.
* Board & Leadership Reporting: Assist in preparing security metrics, risk position reports, and compliance dashboards for senior management and the Board.
* Technical Security Support: Undertake technical tasks to strengthen security posture, including system hardening, patch management, endpoint protection, logging, and vulnerability remediation.
* Sales & Customer Assurance: Own customer security questionnaires, due diligence requests, and RFP security sections. Maintain a library of standard responses, policies, and certifications.
Candidate Profile & Key Skills
* Experience: 2–5 years in information security, compliance, GRC, or risk management.
* Standards & Audit: Hands-on experience with ISO 27001 audits, Cyber Essentials Plus (CE+), and the IASME assessment framework. Understanding of privacy principles, regulations and implementation.
* Tools: Experience with compliance automation platforms (e.g. Vanta) and Microsoft 365 security management.
* Mindset: High-agency self-starter who thrives in a scaling, agile environment and proactively drives initiatives with minimal supervision.
* Communication: Able to translate complex security requirements for technical teams, leadership, and external clients in questionnaires or RFPs.
Company Benefits
* Competitive salary, including share options
* 25 days annual leave + bank holidays
* 1 day off for your birthday
* Fully remote working in the UK
* Company pension scheme
* Private Healthcare (with 24/7 virtual GP service & mental health support)
* Annual eye tests and £75 contribution towards glasses
This role requires candidates to have eligibility to work within the UK.
Security and Compliance OfficerThink Cyber
Apply on Think Cyber (opens in a new tab)Get jobs like this by email
Once a week, we email the new remote jobs open where you live, each with the line that proves it. Every email has a one-click unsubscribe.
