Compliance Specialist

We're partnering with a fast-growing B2B SaaS company whose software is trusted by enterprise organisations operating in highly regulated industries. For this business, Governance, Risk & Compliance isn't simply about maintaining certifications. It's a key part of the customer experience, helping enterprise buyers build trust, accelerate procurement and confidently adopt the platform. As the company continues to scale internationally, GRC has become a strategic business function that supports revenue growth, customer success and long-term partnerships. The Role This is a customer-facing GRC role where you'll act as a trusted advisor to both internal teams and enterprise customers. Working across Sales, Customer Success, Product, Engineering and Legal, you'll help customers understand the company's security and compliance posture, support complex procurement processes and ensure governance becomes a competitive advantage throughout the customer lifecycle. Rather than sitting solely within an internal compliance function, you'll be actively involved in customer conversations, security reviews and due diligence, helping remove commercial barriers and enabling enterprise deals to progress. You'll also own the day-to-day operation of the company's GRC programme, maintaining certifications, driving continuous improvement and leveraging automation to build scalable compliance processes. Responsibilities Own and continuously improve the company's governance, risk and compliance programme Support enterprise sales by leading customer security reviews, due diligence activities and compliance discussions Build trusted relationships with customer security, risk, legal and procurement teams Position security and compliance as a business enabler throughout the sales and customer lifecycle Manage compliance automation platforms including Vanta or Drata Maintain SOC 2 Type II, ISO 27001 and associated compliance programmes Coordinate external audits, evidence collection and remediation activities Partner with Product, Engineering and Legal to embed security and compliance into business operations Maintain policies, risk registers and customer-facing trust documentation Identify opportunities to improve and automate GRC processes as the business grows Proven GRC experience within a B2B SaaS business Experience supporting enterprise customers operating within highly regulated industries such as financial services, healthcare, insurance or the public sector Strong customer-facing experience, including security questionnaires, due diligence, customer audits and compliance workshops Demonstrable experience using GRC as a commercial enabler that supports enterprise sales and customer trust, rather than purely internal compliance Hands-on experience with compliance automation platforms such as Vanta, Drata or Secureframe Strong understanding of SOC 2 Type II, ISO 27001 and modern GRC practices Excellent stakeholder management skills, with the ability to communicate confidently with enterprise customers, auditors and senior internal stakeholders Degree in Cyber Security, Information Security, Computer Science, Risk Management, Law or another relevant discipline Highly Desirable Experience within a Microsoft 365, Azure and Entra ID environment Experience supporting enterprise SaaS businesses selling complex software into regulated markets Exposure to additional compliance frameworks such as ISO 42001, NIS2 or DORA Professional certifications including CISA, CISM, CRISC, CIPP/E or ISO 27001 Lead Auditor What's Offered Highly visible role with direct impact on enterprise customer acquisition and retention Opportunity to position GRC as a strategic commercial function rather than a traditional compliance role Significant customer exposure, working with security, procurement and legal teams at enterprise organisations High levels of ownership within a fast-growing SaaS business Fully remote working environment Long-term progression as the business continues to scale internationally #J-18808-Ljbffr