Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead the development of security risk frameworks and ensure compliance with regulations.
- Company: Join The AA, a leading motoring organisation with a rich history and innovative future.
- Benefits: Enjoy 25 days annual leave, private medical insurance, and a cash car allowance.
- Why this job: Make a real impact on security while working in a dynamic, hybrid environment.
- Qualifications: Expertise in ISO27001 and strong internal audit skills are essential.
- Other info: Diverse learning opportunities and a supportive culture await you at The AA.
The predicted salary is between 60000 - 75000 £ per year.
Location: London (hybrid working 3 office days per week)
Employment Type: Permanent, full time
Additional Benefits: Annual Bonus, Cash-Car Allowance & Private Medical Insurance
We’re looking for a highly capable Security Risk & Compliance Manager to shape and operate our enterprise security risk and compliance framework. This is a key role within Group Security, partnering across technology, risk, compliance and leadership teams to ensure our security posture aligns with business priorities and regulatory expectations. You’ll take ownership of key security frameworks and certifications, drive audit readiness, and provide clear insight into risk and control effectiveness, enabling informed decision-making at a senior level. This opportunity suits someone with strong internal audit capability, deep ISO27001 expertise, and the confidence to operate in a regulated environment without reliance on tooling.
What will I be doing?
- Lead the development and operation of the enterprise security risk and compliance framework aligned to business outcomes and risk appetite
- Own lifecycle management of key certifications (including ISO27001), ensuring audit readiness and successful external assurance outcomes
- Deliver robust security risk assessment, reporting and governance, including KRIs, dashboards and executive insight
- Drive control assurance and continuous improvement, ensuring gaps are identified, owned and remediated effectively
- Partner with cross-functional stakeholders to embed security requirements into technology, change and operational processes
- Act as a senior subject matter expert, influencing decisions and promoting a strong culture of security ownership
What do I need?
- Demonstrated expertise operating and auditing Information Security Management Systems (ISMS), ideally with ISO27001 certification or similar
- Strong internal audit capability, able to independently assess controls without reliance on automated tools
- Proven experience working within regulated environments, with knowledge of FCA and/or PRA expectations
- Ability to build effective relationships and influence senior stakeholders across technology, risk and business teams
- Strong understanding of risk management, control frameworks and assurance practices within complex organisations
- Professional certifications such as ISO27001 Lead Auditor/Implementer, CISSP, CISM, CRISC or equivalent are highly valued
We’re always looking to recognise and reward our employees for the work they do. As a valued member of The AA team, you’ll have access to a range of benefits including:
- 25 days annual leave plus bank holidays + holiday buying scheme
- Worksave pension scheme with up to 7% employer contribution
- Free AA breakdown membership from Day 1 plus 50% discount for family and friends
- Discounts on AA products including car and home insurance
- Employee discount scheme that gives you access to a car salary sacrifice scheme plus great discounts on healthcare, shopping, holidays and more
- Company funded life assurance
- Diverse learning and development opportunities to support you to progress in your career
- Dedicated Employee Assistance Programme and a 24/7 remote GP service for you and your family
We’re an equal opportunities employer and welcome applications from everyone. The AA values diversity and the difference this brings to our culture and our customers. We actively seek people from diverse backgrounds to join us and become part of an inclusive company where you can be yourself, be empowered to be your best and feel like you truly belong.
Security Risk & Compliance Manager (London) employer: Automobile Association
Contact Detail:
Automobile Association Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Security Risk & Compliance Manager (London)
✨Tip Number 1
Network like a pro! Reach out to people in the industry, attend events, and connect on LinkedIn. You never know who might have the inside scoop on job openings or can put in a good word for you.
✨Tip Number 2
Prepare for interviews by researching the company and its culture. Understand their security frameworks and compliance needs so you can speak their language and show how you can add value right from the start.
✨Tip Number 3
Practice your responses to common interview questions, especially those related to risk management and compliance. Use the STAR method (Situation, Task, Action, Result) to structure your answers and highlight your achievements.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets noticed. Plus, it shows you’re genuinely interested in being part of our team at The AA.
We think you need these skills to ace Security Risk & Compliance Manager (London)
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Security Risk & Compliance Manager role. Highlight your experience with ISO27001 and internal audits, as these are key for us. Use specific examples that showcase your skills in risk management and compliance.
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Tell us why you’re passionate about security and compliance. Mention how your background aligns with our needs and how you can contribute to our mission at The AA. Keep it engaging and personal!
Showcase Your Certifications: If you’ve got professional certifications like ISO27001 Lead Auditor or CISSP, make them stand out! We love seeing qualifications that demonstrate your expertise. List them clearly in your application to catch our eye.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, you’ll find all the details you need about the position there!
How to prepare for a job interview at Automobile Association
✨Know Your Frameworks
Make sure you’re well-versed in security risk and compliance frameworks, especially ISO27001. Brush up on how these frameworks align with business outcomes and risk appetite, as this will be crucial in your discussions.
✨Showcase Your Audit Skills
Prepare to discuss your internal audit capabilities in detail. Be ready to share examples of how you've independently assessed controls in regulated environments, and highlight any specific experiences with FCA or PRA expectations.
✨Build Relationships
Demonstrate your ability to build effective relationships with senior stakeholders. Think of examples where you’ve influenced decisions across technology, risk, and business teams, and be prepared to discuss how you can foster a strong culture of security ownership.
✨Prepare for Scenario Questions
Expect scenario-based questions that test your problem-solving skills in real-world situations. Think about potential gaps in security frameworks and how you would identify and remediate them effectively, showcasing your proactive approach.