Own and improve the company’s information security management system, privacy governance, risk registers, policies, audits, and security certifications. Prepare security reporting for leadership and the Board, support technical security activities such as hardening, patching, endpoint protection, logging, and vulnerability remediation, and manage customer security questionnaires and RFP responses. The role also oversees IT partners and Microsoft 365 security administration.
This position is remote but only open to candidates that live in the UK - we are not able to provide any work visas
About Redflags
Redflags is an award-winning cybersecurity software platform using behavioural science to deliver real-time security awareness. Recognised by the Computing Security Excellence Awards 2026 and TechUK Cyber Innovator Award, we empower organisations to manage cyber risk by building secure habits. As a high-growth, remote-first business, we foster an agile, autonomous, and close-knit culture.
Role Purpose
We are seeking an ambitious, early-career Security and Compliance Officer to help mature our Information Security Management System (ISMS). You will assume day-to-day ownership of information security, privacy and cyber governance while maintaining enough technical knowledge to confidently oversee IT partners and work within Microsoft 365 administration environments.
Key Responsibilities
- Governance, Compliance & ISMS: Maintain and improve the ISMS alongside the Data Protection and Security Officer. Manage policies, track risk registers, coordinate internal/external audits, and maintain Cyber Essentials Plus (CE+) and IASME Level 2 certifications.
- Board & Leadership Reporting: Assist in preparing security metrics, risk position reports, and compliance dashboards for senior management and the Board.
- Technical Security Support: Undertake technical tasks to strengthen security posture, including system hardening, patch management, endpoint protection, logging, and vulnerability remediation.
- Sales & Customer Assurance: Own customer security questionnaires, due diligence requests, and RFP security sections. Maintain a library of standard responses, policies, and certifications.
Candidate Profile & Key Skills
- Experience: 2–5 years in information security, compliance, GRC, or risk management.
- Standards & Audit: Hands-on experience with ISO 27001 audits, Cyber Essentials Plus (CE+), and the IASME assessment framework. Understanding of privacy principles, regulations and implementation.
- Tools: Experience with compliance automation platforms (e.g. Vanta) and Microsoft 365 security management.
- Mindset: High-agency self-starter who thrives in a scaling, agile environment and proactively drives initiatives with minimal supervision.
- Communication: Able to translate complex security requirements for technical teams, leadership, and external clients in questionnaires or RFPs.
Company Benefits
- Competitive salary, including share options
- 25 days annual leave + bank holidays
- 1 day off for your birthday
- Fully remote working in the UK
- Company pension scheme
- Private Healthcare (with 24/7 virtual GP service & mental health support)
- Annual eye tests and £75 contribution towards glasses
This role requires candidates to have eligibility to work within the UK.
Similar Jobs
Fintech • Payments • Financial Services
Own a local territory and acquire new business by meeting business owners face-to-face, networking, prospecting, and presenting Teya’s payments and financial solutions. Build trusted relationships, manage the sales pipeline, meet commercial targets, and support Members through onboarding. The role requires resilience, strong communication, commercial curiosity, self-discipline, regular travel, a full UK driving licence, access to a car, English fluency, and UK work authorization.
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Leads strategic Tier 1 banking relationships with full P&L ownership, driving revenue and margin growth. Develops account plans, manages complex negotiations and renewals, advises C-suite stakeholders, coordinates global cross-functional teams, influences product strategy, and oversees forecasting, pipeline visibility, CRM discipline, and client satisfaction. Requires deep financial-services expertise, commercial leadership, banking transformation knowledge, and strong stakeholder-management capabilities.
Top Skills:
Customer Relationship Management (Crm)Salesforce
Fintech • Payments • Financial Services
Own a Sheffield-area territory, prospecting local businesses through face-to-face outreach, networking, referrals, and relationship building. Present Teya’s payments and financial solutions, win new members, manage sales pipelines, achieve commercial targets, and support successful onboarding. The role requires regular territory travel, strong communication, resilience, commercial curiosity, self-discipline, and a customer-focused approach. Field sales or financial services experience is advantageous but not essential.
Top Skills:
Financial Technology (Fintech)Payment Processing
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
