Requirements

• Experience running or contributing to a compliance programme, ideally ISO 27001, with audit knowledge.
• Preference for automating evidence collection over manual chasing of documentation.
• Ability to write code (Python, Go, or similar) or build workflows, with enthusiasm for using AI and agents to reduce toil.
• Competence in answering customer security questionnaires quickly, accurately, and in plain English.
• Strong communication skills to explain controls to engineers and risks to executives clearly.
• A product-focused mindset, identifying gaps in current GRC tooling.
• Comfortable working with high autonomy without detailed specifications.

Nice to Haves

• Experience with ISO 42001 or AI governance.
• Familiarity with SOC 2, GDPR, or fast-growing SaaS company environments.

What You’ll Be Doing

• Own the compliance programme, customer security questionnaires, and supporting evidence.
• Advance ISO 27001 certification efforts and help achieve certification.
• Conduct gap assessments against ISO 42001 for responsible AI management.
• Drive product improvements based on hands-on use (“dogfooding”) of incident.io's own security workflows.
• Collaborate closely with security, engineering, legal, and product teams.
• Scale GRC processes using AI-powered tooling and workflows to streamline audits and evidence collection.

Perks and Benefits

• Private medical insurance covering you and your loved ones.
• Competitive annual leave to support work-life balance.
• First Friday of every month off.
• Enhanced pension contributions.
• Meaningful equity participation in a rapidly growing company.
• Unlimited AI spending budget for all employees.
• Generous parental leave to support family time.
• Two personal budgets: £1000 for setup investment and £500 annually for personal development.