Security GRC Manager | London | On-site

I’m working with a high-growth B2B SaaS business that is building out its security and compliance function as it continues to scale into more demanding enterprise markets.

They’re looking for a Security GRC Manager to take ownership of the security compliance programme end to end, while also playing a key role in enterprise customer trust and security reviews.

This is a hands-on role rather than one focused purely on coordinating audits. You’ll own the operating rhythm across frameworks including ISO 27001, SOC 1, SOC 2 and HIPAA, keeping controls running, evidence organised, policies current, risks visible and audits moving throughout the year.

You’ll also work directly with enterprise customers across security reviews, questionnaires, procurement, RFPs and diligence, helping turn security and compliance into a commercial asset rather than a blocker.

What you’ll be doing

• Own the security compliance programme across ISO 27001, SOC 1, SOC 2, HIPAA and future frameworks
• Run audit cycles throughout the year and coordinate external auditors and internal control owners
• Own controls, evidence, policies, risk registers, access reviews, vendor reviews and business continuity processes
• Lead customer-facing security reviews, questionnaires, RFPs and enterprise diligence
• Build and maintain trust collateral, security portals and reusable questionnaire answer libraries
• Work closely with Product and Engineering to translate compliance requirements into practical controls
• Use AI to improve and automate areas such as policy drafting, evidence management and questionnaire responses
• Help improve the maturity of security, privacy, risk and customer trust as the business moves further upmarket
• Apply strong risk judgement and focus teams on meaningful security improvements rather than compliance theatre