Junior Information Security Analyst (GRC)

• Help maintain and mature Engine’s governance, risk, and compliance programme. • Play a crucial part in ongoing adherence to security standards and regulations, building a foundation of trust for clients and stakeholders. • Take on a hands-on role suited to someone who enjoys engaging with stakeholders across the business. • Work closely with Engineering, Product, and Security Operations teams to embed security controls into processes and culture. • Join an engineering-led company where everyone rolls up their sleeves to deliver good outcomes for clients. • Apply as a recent graduate or early-career professional, as applications from both are welcomed. • Work hybrid from London, within commutable distance of an office.

• Bring a minimum of one year of experience in an information security role. • Bring proven experience supporting and managing compliance efforts. • Bring strong skills in security metrics and reporting. • Bring experience with audit processes and evidence collection. • Work proactively with an organised, detail-oriented approach. • Engage comfortably with stakeholders across a business. • Live within commutable distance of an Engine office.

• Bring experience with GRC software. • Hold foundational certificates in IT risk or audit. • Hold the ISC2 Certified in Cybersecurity qualification. • Hold ISO 27001 Foundation training. • Bring familiarity with SOC 1, SOC 2, CSTAR, or PCI DSS and 3DS frameworks. • Bring experience assessing the security posture of third-party vendors. • Apply even if you do not tick every box, as Engine encourages people to get in touch anyway.

• Learn and support the day-to-day management of compliance programmes, focusing on ISO 27001, SOC 1, SOC 2, CSTAR, and PCI DSS and 3DS. • Act as a key liaison for internal and external auditors, gathering evidence, preparing for audits, and tracking remediation of findings. • Participate in the risk assessment process, identifying, analysing, and documenting information security risks. • Assist in developing and monitoring risk treatment plans. • Help develop, update, and maintain information security policies, standards, and procedures. • Streamline evidence collection across compliance frameworks to keep the business audit ready. • Work with Engineering, Product, and Security Operations to embed security controls. • Identify opportunities to improve the effectiveness and efficiency of the GRC programme. • Assist in delivering and improving the security awareness training programme for all employees. • Support the end-to-end vendor management process, evaluating the security posture of prospective and current vendors.

• Take 33 days holiday including public holidays, used whenever works best for you. • Take an extra day’s holiday for your birthday, with annual leave increasing with length of service and the option to buy or sell up to five days. • Take 16 hours of paid volunteering time a year. • Join a salary sacrifice, company enhanced pension scheme. • Get life insurance at four times salary plus group income protection. • Access private medical insurance with VitalityHealth including mental health support and cancer care, with partner discounts at Waitrose, Mr&Mrs Smith, and Peloton. • Benefit from generous family-friendly policies. • Use Perkbox membership for retail discounts and a wellness platform covering physical and mental health. • Access Cycle to Work, salary sacrificed gym partnerships, and electric vehicle leasing. • Learn across several major compliance frameworks early in your career.

Engine is Starling’s software-as-a-service business, built as the technology that powers Starling and split out as a separate company two years ago. It works with leading banks around the world who want to build rapid growth businesses on its technology, offering the innovative digital features and efficient back-office processes behind Starling’s own success. Engine has seen exceptional growth, largely because it built its own modern technology from the ground up. It is an engineering-led company where everyone is expected to roll up their sleeves, guided by five values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness.