MRP-Global
Platform Security & Compliance Lead – AWS, Terraform, SOC 2, GDPR – Permanent, Hybrid, Full-Time – London, UK
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Title: Platform Security & Compliance Lead
A UK-based technology organization is seeking an experienced Platform Security & Compliance Lead to own security, compliance, and governance across their digital wallet platform, reporting to the CTO, with significant autonomy and end-to-end ownership of the security function.
Key Responsibilities:
- Own the security posture of the AWS environment, including IAM, VPC, Secrets Manager, ECS, Aurora, and access controls.
- Manage identity and access management, including Cloudflare Zero Trust.
- Embed security into engineering through threat modeling, secure code and design reviews, vulnerability management, and secure development practices.
- Manage CI/CD and supply-chain security, including dependencies, GitHub Actions, build provenance, and container security.
- Own security monitoring, incident response, vulnerability management, and penetration testing.
- Lead the SOC 2 programme, including controls, evidence, audits, and remediation.
- Manage UK GDPR and PECR requirements, including DPAs, sub-processors, data processing records, and privacy requirements.
- Lead customer security reviews, questionnaires, vendor assessments, and security due diligence.
- Maintain security policies, training, and compliance requirements relating to Apple and Google Wallet programs.
- Own the security incident lifecycle, including response, notifications, post-incident reviews, and remediation.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Required Skills & Experience:
- Deep hands-on experience securing production AWS environments, including IAM, VPC, containers, and databases.
- Strong Terraform and infrastructure-as-code experience.
- Strong application, cloud, and infrastructure security knowledge.
- Experience with CI/CD, supply-chain security, vulnerability management, and incident response.
- Pragmatic approach to security risk with strong problem-solving and decision-making skills.
- Ability to work autonomously and effectively alongside engineering teams.
- SOC 2 and UK GDPR experience would be highly advantageous.
- Experience working with enterprise customers and security review processes is desirable.
- Ruby/Rails or Go, ISO 27001, or experience in payments, ticketing, or access control would be beneficial.
- Security certifications such as CISSP or CISM are welcomed but not required.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Job Details:
- Location: London, UK
- Working Basis: Hybrid (4 days on-site)
- Employment Type: Permanent
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location