GRC Specialist

We're partnering with a fast-growing B2B SaaS company whose software is trusted by enterprise organisations operating in highly regulated industries.
For this business, Governance, Risk & Compliance isn't simply about maintaining certifications. It's a key part of the customer experience, helping enterprise buyers build trust, accelerate procurement and confidently adopt the platform.
As the company continues to scale internationally, GRC has become a strategic business function that supports revenue growth, customer success and long-term partnerships.
The Role

This is a customer-facing GRC role where you'll act as a trusted advisor to both internal teams and enterprise customers.
Working across Sales, Customer Success, Product, Engineering and Legal, you'll help customers understand the company's security and compliance posture, support complex procurement processes and ensure governance becomes a competitive advantage throughout the customer lifecycle.
Rather than sitting solely within an internal compliance function, you'll be actively involved in customer conversations, security reviews and due diligence, helping remove commercial barriers and enabling enterprise deals to progress.
You'll also own the day-to-day operation of the company's GRC programme, maintaining certifications, driving continuous improvement and leveraging automation to build scalable compliance processes.
Responsibilities

Own and continuously improve the company's governance, risk and compliance programme
Support enterprise sales by leading customer security reviews, due diligence activities and compliance discussions
Build trusted relationships with customer security, risk, legal and procurement teams
Position security and compliance as a business enabler throughout the sales and customer lifecycle
Manage compliance automation platforms including Vanta or Drata
Maintain SOC 2 Type II, ISO 27001 and associated compliance programmes
Coordinate external audits, evidence collection and remediation activities
Partner with Product, Engineering and Legal to embed security and compliance into business operations
Maintain policies, risk registers and customer-facing trust documentation
Identify opportunities to improve and automate GRC processes as the business grows
Proven GRC experience within a B2B SaaS business
Experience supporting enterprise customers operating within highly regulated industries such as financial services, healthcare, insurance or the public sector
Strong customer-facing experience, including security questionnaires, due diligence, customer audits and compliance workshops
Demonstrable experience using GRC as a commercial enabler that supports enterprise sales and customer trust, rather than purely internal compliance
Hands-on experience with compliance automation platforms such as Vanta, Drata or Secureframe
Strong understanding of SOC 2 Type II, ISO 27001 and modern GRC practices
Excellent stakeholder management skills, with the ability to communicate confidently with enterprise customers, auditors and senior internal stakeholders
Degree in Cyber Security, Information Security, Computer Science, Risk Management, Law or another relevant discipline
Highly Desirable

Experience within a Microsoft 365, Azure and Entra ID environment
Experience supporting enterprise SaaS businesses selling complex software into regulated markets
Exposure to additional compliance frameworks such as ISO 42001, NIS2 or DORA
Professional certifications including CISA, CISM, CRISC, CIPP/E or ISO 27001 Lead Auditor
What's Offered

Highly visible role with direct impact on enterprise customer acquisition and retention
Opportunity to position GRC as a strategic commercial function rather than a traditional compliance role
Significant customer exposure, working with security, procurement and legal teams at enterprise organisations
High levels of ownership within a fast-growing SaaS business
Fully remote working environment
Long-term progression as the business continues to scale internationally

#J-18808-Ljbffr