Security Compliance Analyst

The role

You will own security control processes, perform reviews, and manage third-party risk. You will also support commercial teams with security questionnaires and help automate compliance processes using AI.

What you will do

• Own a portfolio of assigned security control processes end to end
• Perform manual and tool-based security controls
• Carry out regular reviews such as user access reviews
• Run the Third-Party Risk Management process
• Maintain risk registers including supplier, risk, asset, and data processing registers
• Analyse security and privacy requirements in bids and tenders
• Respond to security questionnaires and information requests from customers
• Support audits and certifications such as ISO 27001, SOC 2, PCI DSS, NIST CSF and Cyber Essentials
• Look for opportunities to automate or improve control processes with AI tools

Required qualifications

• Hands-on experience in information security, IT compliance, internal control or audit
• Practical experience with audits or assessments against at least two recognised frameworks from ISO 27001, SOC 2, PCI DSS, GDPR or NIST
• Solid understanding of access control, risk management, third-party risk and data protection
• Understanding of how cloud services and SaaS tools fit together from a security point of view
• Clear writing and a knack for structuring information well

Nice to have

• Experience with Third-Party Risk Management or vendor security assessments
• Experience supporting RFPs, tenders or customer security questionnaires
• Hands-on experience with compliance automation or GRC platforms
• Interest in automation, such as scripting, low-code tools or using AI to improve workflows
• Experience with Vanta, AWS, Jira or Confluence
• A relevant certification such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CISM, CRISC, CISSP or Security+
• Experience in SaaS, payments or public transport and public sector environments

Benefits

• 15 days paid vacation per year plus 18 public holidays
• Private Healthcare
• Monthly team bonding allowance
• Menopause support
• Choice of a workstation
• Ability to work for up to 3 months per year from any country in the world
• Training allowance of up to $750 USD every year
• $250 USD to spend on home office every year

About the company

Masabi builds fare collection platforms that allow riders to buy and present tickets for public transport. Their Justride platform is used in over 250 locations globally.