💼 About This Role

You'll join Trustpilot's Information Security team to mature core compliance frameworks and shape AI security and governance. You'll risk-assess new AI systems and automate manual GRC workflows, directly strengthening our security posture. This is a unique opportunity to balance risk with fast-paced innovation in a FTSE-250 company.

🎯 What You'll Do

• Drive compliance efforts for SOC 2, ISO27001, ISO42001 and PCI DSS
• Evaluate and manage security risks of AI and machine learning systems
• Streamline vendor and third-party security assessments
• Develop internal AI standards aligned with regulations like EU AI Act

📋 Requirements

• Solid experience with SOC 2, ISO27001 and PCI DSS
• Well-versed in risk management processes including third-party risk
• Practical experience developing and implementing security policies
• Understanding of cloud environment risks

✨ Nice to Have

• Familiarity with AI governance frameworks like EU AI Act or NIST AI RMF
• Experience using AI to automate GRC workflows

🎁 Benefits & Perks

• 🏖️ Flexible working options
• 💰 Competitive compensation + bonus
• 🎓 Learning opportunities through Trustpilot Academy and Blinkist
• 🏥 Health cash plan and Employee Assistance Program
• 🧘 Headspace mindfulness app access