Security Compliance Analyst - UK

Salary: £42,000 - 70,000 per year

Requirements:

• 2+ years of information security experience, particularly in Governance, Risk & Compliance (GRC) or IT audit.
• Experience implementing or auditing information security programs based on industry frameworks such as ISO 27001, SOC 1, SOC 2, FedRAMP, or similar.
• Bachelors degree or equivalent work experience in Computer Science, Engineering, Accounting, or a related field.
• Strong customer-facing communication skills, including the ability to explain complex concepts clearly.
• Strong written communication skills and attention to detail when tailoring content for audiences such as end users, Legal, IT, Security, Sales, or Customer Success.
• Customer-focused mindset and understanding of how security contributes to sales enablement.
• Experience working with global teams across time zones, cultures, and languages.
• Familiarity with the Salesforce platform and shared security responsibility models in SaaS environments is highly desirable.
• Relevant certifications such as CISSP, CISM, CRISC, or CISA are highly desirable.
• Working knowledge of CSA CAIQ, VSA, SIG Lite, and other industry-standard questionnaires is highly desirable.
• Experience with SaaS solutions such as Responsive, Whistic, and GRC platforms is highly desirable.

Responsibilities:

• Support our enterprise-wide security compliance and customer trust efforts, partnering with our Information Security team and functions such as IT, Legal, and Privacy.
• Support our Customer Trust Program by completing customer security questionnaires and assisting with sales proposals and RFx responses.
• Maintain our standard-response database in Responsive and support our Proposal Manager as needed.
• Support customer calls focused on security within our products.
• Support compliance audits and readiness initiatives involving frameworks such as SOC 1, SOC 2, ISO 27001, ISO 42001, and FedRAMP.
• Monitor control remediation efforts with stakeholders across functions, geographies, and time zones.
• Document gap analyses in work programs and record progress on remediation plans.
• Support the creation, review, and maintenance of our information security policies, standards, procedures, and guidelines.
• Maintain our enterprise-wide security controls library, map controls across frameworks, and identify controls relevant to our company.
• Work with our Legal team to review security language in line with our security commitments.
• Conduct standard third-party security risk assessments for scheduled annual reviews and new vendor onboarding.
• Maintain our vendor risk management inventory in Whistic, keeping information, key contacts, scoping, and audit documentation current.
• Support and track remediation of identified non-compliance issues.

Technologies:

• Cloud
• Support
• Salesforce
• Security

More:

We are Certinia, delivering a Services-as-a-Business platform that connects services estimation and delivery, customer success management, and financial planning and accounting. Our Professional Services Automation, Customer Success, and Financial Management solutions are delivered on the Salesforce cloud platform. Headquartered in Austin, Texas, we have a presence around the world and are backed by Haveli Investments, TA Associates, General Atlantic, and Salesforce Ventures. We are hiring a full-time Security Compliance Analyst based in the UK. The role supports customer trust, compliance audits, governance reviews, controls monitoring, third-party risk management, and contractual reviews, and reports to our Head of Information Security while working closely with our Security Compliance Manager.

last updated 39 week of 2026