At a Glance
- Tasks: Drive security and compliance initiatives while ensuring our organisation remains secure and resilient.
- Company: Join a pioneering joint venture at the forefront of AI and industry transformation.
- Benefits: Professional growth, continuous learning, and a collaborative team environment.
- Other info: Dynamic role with opportunities to work on cutting-edge AI projects.
- Why this job: Make a real impact in security and compliance within an innovative tech landscape.
- Qualifications: Experience in security engineering and strong understanding of compliance frameworks.
The predicted salary is between 36000 - 60000 € per year.
Complexio is Foundational AI, working to automate business activities by ingesting whole company data – both structured and unstructured – and making sense of it. Using proprietary models and algorithms, Complexio forms a deep understanding of how humans are interacting and using it. Automation can then replicate and improve these actions independently.
We are looking for a Security & Compliance Specialist to own and drive our security and compliance requirements. This role is hands-on and strategic, balancing day-to-day operations with long-term initiatives to ensure our organisation remains secure, resilient, and compliant. You will work closely with engineering, product, and leadership teams to embed security into everything we do, while also representing our security and compliance posture to customers, partners, and auditors.
Requirements- Security Governance & Compliance
- Lead the company's efforts to achieve and maintain ISO 27001 (and other frameworks as needed, e.g., SOC 2, EU AI Act readiness).
- Establish, document, and evolve security and compliance policies, ensuring they meet company needs and regulatory requirements.
- Drive security and compliance initiatives across business functions, engaging senior stakeholders.
- Monitor changes in relevant compliance frameworks (e.g., CIS Benchmarks, EU AI Act, GDPR) and adapt processes accordingly.
- Operational Security
- Oversee day-to-day security operations, including vulnerability management, access reviews, and incident response readiness.
- Provide insights and triage signals from security tooling (SAST, DAST, dependency scanning, SIEM).
- Work hands-on to perform internal security assessments or penetration testing.
- Manage relationships with external pentest providers, auditors, and assessors.
- Secure Development Lifecycle (SDLC)
- Partner with engineering teams to embed security in the SDLC and DevSecOps practices.
- Advise and guide on secure coding practices, threat modeling, and architectural reviews.
- Instrument automated tooling for CI/CD pipelines to improve visibility of security signals and enforcement.
- Customer & External Engagement
- Represent the company's security, privacy, and data protection posture in customer and partner discussions.
- Provide clear and confident explanations of controls, certifications, and processes during due diligence.
- Contribute to security documentation for customer-facing materials.
- Risk Management & Strategy
- Perform regular risk assessments and maintain the company's risk register.
- Translate technical risks into business context to enable leadership decisions.
- Proactively identify emerging security and compliance risks (including AI-related risks) and propose mitigation strategies.
- Proven experience in a security engineering, compliance, or security leadership role.
- Strong understanding of security standards and frameworks (ISO 27001, SOC 2, CIS, NIST, GDPR, EU AI Act).
- Hands-on technical skills in areas such as penetration testing, application security, or infrastructure hardening.
- Familiarity with modern software development practices, DevSecOps, and cloud-native architectures (preferably Python eco-system, Kubernetes and Azure/AWS/GCP).
- Excellent communication skills with the ability to influence stakeholders and explain security to both technical and non-technical audiences.
- Experience working with auditors, external assessors, and customer security teams.
- Prior experience building security functions in a fast-growing SaaS or AI/ML-driven company.
- Knowledge of AI-specific compliance and risk frameworks (NIST AI RMF, EU AI Act).
- Join a pioneering joint venture at the intersection of AI and industry transformation.
- Work with a diverse and collaborative team of experts from various disciplines.
- Opportunity for professional growth and continuous learning in a dynamic field.
Security & Compliance Specialist in Hull employer: Complexio
At Complexio, we pride ourselves on being a forward-thinking employer that champions innovation and collaboration in the rapidly evolving field of AI. As a Security & Compliance Specialist, you will be part of a diverse team dedicated to embedding security into our core operations while enjoying opportunities for professional growth and continuous learning. Our supportive work culture fosters creativity and engagement, making Complexio an excellent place to build a meaningful career in a dynamic environment.
StudySmarter Expert Advice🤫
We think this is how you could land Security & Compliance Specialist in Hull
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, attend meetups, and connect with people on LinkedIn. You never know who might have the inside scoop on job openings or can put in a good word for you.
✨Tip Number 2
Prepare for interviews by researching the company and its security practices. Be ready to discuss how your skills align with their needs, especially around ISO 27001 and compliance frameworks. Show them you’re not just a fit, but the perfect fit!
✨Tip Number 3
Don’t forget to showcase your hands-on experience! Whether it’s vulnerability management or incident response, be prepared to share specific examples of how you’ve tackled security challenges in the past.
✨Tip Number 4
Apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we love seeing candidates who are proactive about their job search!
We think you need these skills to ace Security & Compliance Specialist in Hull
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the Security & Compliance Specialist role. Highlight your relevant experience with security frameworks like ISO 27001 and any hands-on skills you have in penetration testing or compliance management. We want to see how your background aligns with what we're looking for!
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you're passionate about security and compliance, and how you can contribute to our mission at Complexio. Be sure to mention any specific projects or achievements that demonstrate your expertise.
Showcase Your Communication Skills:Since you'll be working with various teams and stakeholders, it's crucial to showcase your communication skills in your application. Use clear and concise language, and don't hesitate to explain complex security concepts in a way that's easy to understand. We love candidates who can bridge the gap between technical and non-technical audiences!
Apply Through Our Website:We encourage you to apply through our website for the best chance of getting noticed. It helps us keep track of applications and ensures you’re considered for the role. Plus, it’s super easy – just follow the prompts and submit your materials!
How to prepare for a job interview at Complexio
✨Know Your Security Standards
Make sure you brush up on ISO 27001, SOC 2, and other relevant frameworks before the interview. Being able to discuss these standards confidently will show that you understand the compliance landscape and can contribute to the company's security governance.
✨Showcase Your Hands-On Skills
Prepare to talk about your practical experience in security operations, like vulnerability management or penetration testing. Bring examples of how you've successfully implemented security measures in past roles, as this hands-on experience is crucial for the position.
✨Communicate Clearly
Practice explaining complex security concepts in simple terms. You'll need to engage with both technical and non-technical stakeholders, so being able to articulate your thoughts clearly will set you apart from other candidates.
✨Stay Updated on Compliance Changes
Familiarise yourself with recent changes in compliance frameworks like GDPR and the EU AI Act. Showing that you're proactive about staying informed will demonstrate your commitment to security and compliance, which is key for this role.
