Spencer Rose
Information Security Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Security Compliance & Assurance Lead
Permanent - £85,000
Duration: 6 months
Location: Fully Remote
Information Security Compliance & Assurance Lead
We are seeking an experienced Information Security Compliance & Assurance Lead to support a regulated SaaS organisation through a critical period of security assurance and certification activity.
This is a hands-on role focused on leading and coordinating the delivery of a SOC 2 audits and ISO 27001 certification/surveillance audits, ensuring the business is audit-ready whilst strengthening its overall compliance and security governance framework.
This position will work closely with Technology, Engineering, Risk, Compliance, Legal and Executive stakeholders to drive audit preparedness, evidence collection, control effectiveness reviews and remediation activities.
Responsibilities
- Lead the end-to-end preparation and delivery of SOC 2 audits.
- Manage ISO 27001 certification, surveillance or recertification activities.
- Assess and mature security controls against relevant frameworks and regulatory requirements.
- Conduct control gap assessments and coordinate remediation plans.
- Develop and maintain information security policies, standards and procedures.
- Coordinate audit evidence gathering and validation across multiple business functions.
- Work directly with external auditors and certification bodies.
- Monitor and track remediation activities, ensuring timely closure of findings.
- Support risk assessments and control effectiveness reviews.
- Provide executive-level reporting on audit readiness, risks and compliance posture.
- Advise on security governance, assurance and continuous improvement initiatives.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Skills/Experience
- Proven experience delivering successful SOC 2 Type II audits.
- Strong practical experience with ISO 27001 implementation and certification audits.
- Background in Information Security, Governance, Risk & Compliance (GRC), or Security Assurance.
- Experience working within a regulated environment, ideally SaaS, FinTech, HealthTech, InsurTech or other technology-led businesses.
- Strong understanding of information security controls, governance and risk management practices.
- Experience managing audit engagements and external auditor relationships.
- Ability to interpret and map controls across multiple frameworks.
- Excellent stakeholder management and communication skills.
- Experience driving remediation programmes across technical and business teams.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Experience
- Experience within cloud-native environments (AWS, Azure and/or GCP).
- Familiarity with GDPR, NIST CSF, CIS Controls, PCI DSS or related frameworks.
- Security or audit certifications such as:
- ISO 27001 Lead Implementer or Lead Auditor
- CISSP
- CISM
- CRISC
- CISA
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location