Senior GRC Engineer

As a Senior GRC Engineer based in the UK, you're the technical bridge between GRC and the rest of the business, with a natural focus on UK/EU regulatory and market-access requirements. You're comfortable sitting in a room with engineering and talking architecture on some days, and on other days, feeling confident on a call with a customer and translating security in practice to build trust. Your north star is compliance by design: instead of audits being a point-in-time scramble to assemble evidence, they should be a natural byproduct of controls, monitoring, and processes that run continuously, year-round.

A core part of that is thinking in terms of build once, apply to many: using our cross-framework control crosswalk to identify where requirements across our certified standards, including ISO 27001, 27017, 27018, 27701, and 42001, SOC 1/2 Type 2, Cyber Essentials, ENS, and TX-RAMP genuinely overlap, so our partners build to a single common control instead of a different bespoke solution for every certification. Just as important as the automation itself is making the reasoning behind it visible: helping partners across the business understand the why behind a given control, whether it traces back to a compliance obligation, a customer request, or an emerging threat, not just the what.