Lead Security Engineer

The Opportunity: You'll take ownership of the company's security compliance and certification programmes, ensuring they meet the expectations of customers, auditors and an increasingly complex security environment. This is a hands-on senior individual contributor role, offering significant autonomy, visibility and the chance to build processes that will grow alongside the business. You'll work closely with engineering, security, IT and leadership teams, turning compliance requirements into practical security improvements.

What You'll Be Doing: SOC 2 Type II: Lead audit preparation, scoping, evidence collection, control assessments, remediation and ongoing compliance. ISO 27001: Drive certification and ongoing compliance activities, including security controls, documentation, risk assessments and audit coordination. Security Frameworks: Implement, assess and maintain controls aligned with SOC 2, ISO 27001, NIST and other relevant security standards. Security Risk Management: Identify, assess and manage security risks, working with technical teams to implement practical solutions. Security Policies & Governance: Develop and improve security policies, standards, procedures and internal security documentation. Audit Ownership: Work directly with external auditors, coordinate stakeholders and ensure audit findings are addressed effectively. Third-Party Security: Support vendor risk assessments, security reviews and customer security requirements. Continuous Improvement: Build scalable processes, introduce improvements and help ensure security compliance keeps pace with business growth.

Essential Experience: 5+ years' experience across Cyber Security Engineering, Corporate Security, Security Compliance or GRC, ideally within a software or technology environment. Proven hands-on experience leading or taking significant ownership of SOC 2 Type II and/or ISO 27001 audits and certification activities. Strong understanding of security controls, risk assessments, remediation and compliance frameworks, including NIST. Ability to translate security requirements into practical technical controls, working closely with engineering and IT teams. Experience building or improving security policies, processes and compliance programmes. Confidence working directly with auditors, technical stakeholders and senior leadership. Strong communication skills and the ability to manage security initiatives independently. Just as importantly, we're looking for the right mindset. Someone who: Has genuine technical and compliance experience, not just theoretical knowledge of frameworks. Can take ownership without needing a large team or layers of management. Is comfortable learning unfamiliar technologies, including bespoke internal tools. Can adapt quickly and find practical solutions rather than relying on rigid processes. Enjoys working in a fast-paced, collaborative environment with a flat hierarchy. Understands how to balance strong security standards with the needs of a rapidly growing business. Why Consider This Opportunity? Real ownership: Lead important security and certification initiatives with the autonomy to make a difference. Build something meaningful: Help shape the company's security and compliance programmes rather than simply maintaining established processes. Exceptional colleagues: Work alongside talented engineers and technology leaders with experience across some of the world's leading technology businesses. High-growth environment: Join an ambitious company at an exciting stage, with significant opportunities for professional development. Influence and visibility: Work closely with leadership and have a genuine say in how security and compliance evolve.

Equity: An opportunity to share in the future success of the business.