Security GRC Analyst

Salary: £55,000 - 95,000 per year

Requirements

• We have 5+ years of experience in a related role, ideally within a regulated, cloud-native business or FinTech.
• We have a strong foundational understanding of security risk management principles and hands-on experience with compliance frameworks such as ISO 27001, PCI-DSS, or SOC 2.
• We take a risk-first, pragmatic approach, starting with the business risk rather than the checklist.
• We have outstanding communication skills and can comfortably work with technical stakeholders, understand their challenges, and translate them into business risks.
• We are highly proactive and self-motivated, with a strong drive to improve our security posture and lead change.
• We have direct practical experience with security compliance and automation platforms such as Vanta or Drata.
• We have experience with Python or a similar programming/scripting language, and/or using AI to improve productivity through automation.

Responsibilities

• We help maintain, improve, and scale our security compliance programmes in alignment with standards such as SOC 2, ISO 27001, and PCI-DSS, as well as regulator expectations and UK GDPR.
• We collaborate on identifying security risks across the business, including emerging AI-driven and agentic threats, and support practical risk-first mitigation strategies.
• We use our security compliance platform to automate evidence collection and reduce manual overhead, moving toward continuous audit readiness.
• We conduct vendor and third-party security risk assessments to evaluate the security posture of partners and critical outsourced service providers.
• We bridge the gap between engineering and business governance by turning technical security metrics into clear, risk-based narratives for internal stakeholders and external auditors.
• We support the delivery and promotion of security awareness initiatives across the organisation.
• We actively engage with engineers, developers, and IT teams to align security controls with engineering realities.
• We participate in external audits and assessments by gathering evidence, preparing documentation, and supporting a smooth audit cycle.

Technologies

• AI
• Cloud
• Support
• Python
• Security
• Machine Learning

More

We are Lendable, a fast-growing fintech company on a mission to build the worlds best technology to help people get credit and save money. We are one of the UKs newest unicorns, profitable since 2017, backed by top investors including Balderton Capital and Goldman Sachs, and loved by customers with outstanding reviews. We have rebuilt major consumer finance products from scratch and are now expanding into the UK and US. This is a full-time hybrid role based in London within our Engineering & Product department. We offer a winning team environment, flexible working, social events, health coverage, retirement and savings support, an employee referral programme, office meals and snacks in select locations, and sustainable commuting benefits in select locations. Our hiring process includes an initial recruiter chat, cognitive assessment, hiring manager call, technical interview, and culture-add interview.

last updated 34 week of 2026