At a Glance
- Tasks: Manage governance, risk, and compliance for our innovative SaaS platforms.
- Company: Join Lex Dinamica, a leader in data privacy recruitment.
- Benefits: Flexible working options, competitive salary, and career growth opportunities.
- Why this job: Make a real impact on security and compliance in a dynamic tech environment.
- Qualifications: Degree in Information Security or related field; 2+ years in GRC.
- Other info: Hybrid or remote work available; diverse and inclusive workplace.
The predicted salary is between 28800 - 48000 £ per year.
Job Description
We are seeking a detail-oriented and proactive SaaS GRC Specialist to strengthen our Governance, Risk, and Compliance framework as we scale our SaaS operations. In this role, you will ensure that our business processes, security controls, and regulatory obligations are consistently met. You will work across multiple teams—security, legal, product, and operations—helping us maintain trust with customers and regulators while supporting business growth.
Key Responsibilities
- Own and manage governance, risk, and compliance initiatives for our SaaS platforms.
- Monitor, review, and improve internal policies, procedures, and controls in line with ISO 27001, SOC 2, GDPR, and other regulatory frameworks.
- Conduct risk assessments and recommend mitigation strategies for SaaS operations and customer data protection.
- Collaborate with product, engineering, and IT teams to embed compliance into day-to-day operations.
- Prepare and support external audits, certifications, and customer due diligence requests.
- Deliver GRC training and awareness sessions to employees across the business.
- Track regulatory changes and advise leadership on potential business impacts.
Requirements
- Bachelor’s degree in Information Security, Business, Compliance, or related field.
- 2+ years of experience in GRC, risk management, or compliance (preferably within SaaS or technology companies).
- Strong knowledge of SaaS compliance frameworks (ISO 27001, SOC 2, GDPR, NIS2, or similar).
- Ability to interpret regulations and translate them into practical, business-friendly processes.
- Excellent written and verbal communication skills (German or English; both preferred).
- Strong organizational skills with the ability to manage multiple priorities.
Nice-to-Have
- Professional certifications (CISM, CRISC, ISO 27001 Lead Implementer, or similar).
- Experience working with SaaS platforms (AWS, Azure, Salesforce, HubSpot, etc.).
- Familiarity with vendor risk management and third-party security assessments.
- Exposure to data privacy laws beyond GDPR (CCPA, UK-GDPR, HIPAA).
Role Type
- Permanent or Contract
- London-based (Hybrid) or remote
About Us
Discover tailored data privacy jobs and recruitment opportunities with Lex Dinamica. As a strategic career partner, we specialize in connecting candidates with roles that align with their expertise and aspirations. With partnerships with clients and top candidates, we ensure that your next career move in data privacy and consulting is fulfilling and aligned with the evolving landscape.
Our Process
The data you provide us with will be processed exclusively for job placement requirements and assessing your application against our clients' requirements. You may withdraw your application at any time by getting in touch with a member of our team, via LinkedIn or contact details found on your website. You may ask us to keep your information on file for any future opportunities.
For more information, or for part-time opportunities, get in touch with our team via LinkedIn.
Lex Dinamica is proud to be an equal opportunity employer, which means we are committed to creating and celebrating diverse thoughts, cultures, and backgrounds throughout our organization. Employment at or through Lex Dinamica is based on substantive ability, objective qualifications, and work ethic – not an individual’s background, religion, sex or gender, gender identity or expression, sexual orientation, national origin or ancestry, alienage or citizenship status, physical or mental disability, pregnancy, age, genetic information, veteran status, marital status, status as a victim of domestic violence or sex offenses, reproductive health decision, or any other characteristics protected by applicable law.
GRC Consultant - SaaS employer: Lex Dinamica
Contact Detail:
Lex Dinamica Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land GRC Consultant - SaaS
✨Tip Number 1
Network like a pro! Reach out to folks in the GRC space, especially those working with SaaS. Attend industry meetups or webinars and don’t be shy about introducing yourself. You never know who might have the inside scoop on job openings!
✨Tip Number 2
Show off your skills! Prepare a portfolio or case studies that highlight your experience with compliance frameworks like ISO 27001 or SOC 2. When you get the chance to chat with potential employers, share specific examples of how you've tackled challenges in past roles.
✨Tip Number 3
Practice makes perfect! Get ready for interviews by doing mock sessions with friends or mentors. Focus on articulating how you can help maintain trust with customers and regulators, as this is key for a GRC Consultant role.
✨Tip Number 4
Don’t forget to apply through our website! We’ve got loads of opportunities tailored just for you. Plus, it’s a great way to ensure your application gets the attention it deserves. Let’s land that dream job together!
We think you need these skills to ace GRC Consultant - SaaS
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the GRC Consultant role. Highlight your experience with SaaS compliance frameworks and any relevant certifications. We want to see how your skills align with what we're looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about governance, risk, and compliance in the SaaS space. Let us know how you can contribute to our team and make a difference.
Showcase Your Communication Skills: Since excellent communication is key for this role, make sure your application reflects that. Use clear and concise language, and don’t forget to proofread for any typos or errors. We appreciate attention to detail!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it makes the process smoother for everyone involved!
How to prepare for a job interview at Lex Dinamica
✨Know Your GRC Frameworks
Make sure you brush up on your knowledge of ISO 27001, SOC 2, and GDPR. Be ready to discuss how these frameworks apply to SaaS operations and how you've implemented them in past roles. This shows you're not just familiar with the terms but can also apply them practically.
✨Showcase Your Collaboration Skills
Since this role involves working across multiple teams, prepare examples of how you've successfully collaborated with different departments like security, legal, and product teams. Highlight any specific projects where your teamwork made a significant impact.
✨Prepare for Risk Assessment Questions
Expect questions about conducting risk assessments and recommending mitigation strategies. Think of scenarios from your previous experience where you identified risks and how you addressed them. This will demonstrate your proactive approach to GRC.
✨Communicate Clearly and Confidently
With excellent communication skills being a requirement, practice articulating your thoughts clearly. Whether it's discussing compliance processes or explaining complex regulations, being able to convey your ideas effectively will set you apart.