GRC Coordinator

We're looking for a well-organised, detail-focused GRC Coordinator to join our growing Governance, Risk & Compliance (GRC) team. This is a great opportunity for someone early in their compliance or security career, or moving across from an administrative, audit-support, or IT-support background, who wants to build a career in GRC within a growing SaaS group.

You'll be the organisational engine of the GRC team, owning our Third-Party Risk Management (TPRM) process day to day, triaging and coordinating incoming compliance requests, and keeping our work logged, prioritised, and moving. You won't be expected to be an expert in every framework we work with, you'll own the structure and flow of the work, and grow your knowledge with direct guidance and real mentorship.

You'll report to the Director of GRC and work closely with the Senior Director of Global Risk & Compliance, with genuine room to grow as you develop.

Responsibilities:

• Own the day-to-day running of our Third-Party Risk Management (TPRM) process, coordinating vendor due diligence from intake through to sign-off with guidance from the wider team.
• Send, track, and chase vendor security questionnaires and assurance evidence (e.g. ISO 27001 certificates, SOC 2 reports, penetration test summaries).
• Maintain the vendor register, risk tiering, and reassessment schedules, keeping records accurate and audit-ready.
• Act as the first point of contact for incoming GRC requests including security questionnaires, customer and prospect due diligence, and general queries relating to ISO 27001, ISO 42001, GDPR and other data protection regulations, SOC 2, HIPAA, and PCI DSS.
• Triage and prioritise incoming requests, log them in Jira, and assign them to the right GRC team member, tracking each through to completion.
• Chase outstanding security awareness training, following up with individuals and managers to drive completion rates up.
• Attend team and stakeholder meetings, take clear notes, and capture actions in Jira.
• Help gather and organise compliance evidence for internal and external audits, under direction from the Director of GRC and the Senior Director of Global Risk & Compliance.
• Keep GRC documentation and trackers tidy, current, and audit-ready.
• Suggest improvements to how we organise and run GRC operations as you learn the ropes.

Requirements:

Essential

• Right to work in the UK without sponsorship; we are unable to offer visa sponsorship for this role.
• Highly organised, with the ability to juggle and prioritise multiple requests and deadlines without dropping things.
• Strong written and verbal communication; clear, professional, and concise.
• Comfortable with everyday workplace and collaboration tools, and quick to pick up new systems (we use Jira to log and track work).
• A methodical, detail-oriented approach and a genuine interest in building a career in compliance, security, or risk.
• Reliable and proactive when working independently in a remote setting.
• Willingness to travel occasionally to our European or US offices.

Desirable

• Some exposure to compliance, GRC, risk, audit, information security, or a related coordination/administrative role.
• Awareness of one or more common frameworks or regulations (ISO 27001, ISO 42001, SOC 2, GDPR, HIPAA, PCI DSS); a willingness to learn matters more than deep expertise.
• Familiarity with Jira, Vanta, KnowBe4, or similar GRC / ticketing / training tools.
• Experience in a SaaS / software or fast-growth, multi-entity business.
• A foundational qualification, or study towards one (e.g. ISO 27001 Foundation, BCS/ISEB Data Protection, CIPP/E).

You are motivated by:

• Hustle: You inspire others to work as hard as you. You will find a way, no matter how hard the task is.
• Ownership: You have an owner/builder mentality. You care about what you deliver and own your mistakes.
• Proactivity: You don’t wait for someone to tell you what to do or what problems to solve. You are always looking for ways to learn and improve.
• Excellence: You set a high bar and surpass expectations. You hit your goals and ask for more.
• Humility: You are not above any task in the organization and are willing to drop what you’re doing to help a teammate.

What you can expect from us:

The team: Capacity team members enjoy the opportunity and benefits of working at an artificial intelligence startup, but with leaders who’ve worked at places like Apple, Ebay, Visa, Answers.com, Oracle, Boeing, and many more world-class companies. The culture at Capacity encourages innovation, independent problem solving, and collaboration as we continue to mature our product in the ever-changing world of AI.

We provide:

• Private health insurance
• Company Profits Interest Units or Profits Interest Units Appreciation Rights eligibility
• 25 days paid leave plus bank holidays
• Pension
• Group life assurance
• Group income protection
• Flexible work environment
• A supportive, diverse workplace where we prioritize respect for each other and our clients
• A fun and collaborative team culture

Salary range: The expected base salary for the role is between £30,000 and £42,000; actual salary will be commensurate with a candidate's experience, skill and location.

Still unsure? At Capacity we value more than just hard skills. Our goal is to build a holistic and diverse team. If you aren’t sure if you qualify, just apply! We will carefully consider your application and are always grateful for any time and effort invested in Capacity.

But wait, there’s more! At Capacity we believe in more than just building amazing products and helping our customers. Although we are a remote workforce, we remember the neighborhood where we started. We still strive to elevate our community by furthering access to education and careers in the tech space. Our affiliated nonprofit, Create A Loop, brings rigorous computer science courses to underserved communities with little to no access to formal computer science education. There are many opportunities for our Capacity team members to serve and educate our Create A Loop students throughout the year.