Information Security Analyst (Governance, Risk and Compliance)

We are seeking a mid-level Governance, Risk and Compliance analyst, working in our Information Security Team, to enable us to continue to reduce Information Security risk, advance the security of our products, our data, our infrastructures, our people and protect our brand and reputation.

What you’ll be doing:

The suitable candidate will be interested in Information Security, risk and be able to develop working relationships across multiple functions, including Engineering, Product, Commercial, Legal etc.

• Work directly alongside and for the Head of Information Security Governance, Risk and Compliance on maturing Information Security risk, working closely alongside our Risk and Internal Audit teams.
• Help improve third-party and supply chain risk management, including requirements from customers as well as vendor due diligence.
• Mature our policies, our public-facing security documentation and our Information Security White Paper.
• Be integral to building our maturity in relevant areas of compliance, including SOC 2, ISO27001 and PCI DSS.
• Help us automate our way out of manual processes.
• Be a champion for all things Information Security risk across the business.

Who you are:

• Experience in the management of compliance frameworks such as SOC 2, ISO27001 and PCI DSS.
• Familiarly with the risk management processes, including risk identification, assessment and mitigation.
• Understanding of third-party risk management and vendor security due diligence.
• Experience developing and managing policies and procedures.
• A technologist who can help us ‘automate the boring stuff’.
• An interest for security and risk in the internet and digital economy.
• A pragmatist who knows how to balance risk vs pace of innovation.
• A reasonable understanding of the risks of Cloud environments.

What’s in it for you:

• A range of flexible working options to dedicate time to what matters to you
• Competitive compensation package + bonus
• 25 days holiday per year, with an extra 5 days holiday allocated after your 1 year anniversary (prorated) 
• Two (paid) volunteering days a year to spend your time giving back to the causes that matter to you and your community
• Rich learning and development opportunities are supported through the Trustpilot Academy, LinkedIn Learning, and Blinkist
• Comprehensive health package, pension, and full access to Headspace, a popular mindfulness app to promote positive mental health
• Paid parental leave
• Central office with  a laid-back vibe and constant buzz of different languages being spoken everywhere you go It’s complete with a coffee bar, canteen, and table tennis and has a wide variety of refreshments available - you can opt-in for breakfast and lunch at an affordable price
• Regular opportunities to connect and get to know your fellow Trusties, including company-wide celebrations and events, ERG activities, and team socials
• Opportunity to join the Trustpilot Social Club for a small monthly fee and attend regular social and leisure activities like go-karting, cooking classes, and escape rooms 
• Employee discounts to restaurants and shops 

Still not sure?

We want to be a part of creating a more diverse, equitable, and inclusive world of work for all. We’re excited to hear about your experiences as well as how you will contribute to our working culture. So, even if you don’t feel you don't meet all the requirements, we'd still really like to hear from you!

#LI-MF1