At a Glance
- Tasks: Join our team to enhance security and compliance in a fast-paced tech environment.
- Company: Trustpilot, a leading consumer review platform with a mission to build trust.
- Benefits: Flexible working, competitive pay, 25+ days holiday, and rich learning opportunities.
- Other info: Dynamic workplace culture with diverse perspectives and career growth potential.
- Why this job: Make a real impact on AI security while collaborating with passionate professionals.
- Qualifications: Experience in compliance frameworks and a passion for risk management.
The predicted salary is between 50000 - 60000 £ per year.
At Trustpilot, we are on an incredible journey. We are a profitable, high-growth FTSE-250 company with a big vision: to become the universal symbol of trust. We run the world’s largest independent consumer review platform, and while we have come a long way, there is still so much exciting work to do. Come join us at the heart of trust!
Ready to help us navigate a major shift in technology that brings both exciting opportunities and new security risks? Our Information Security team’s mission is to securely enable Trustpilot to be the universal symbol of trust. As our new Governance, Risk and Compliance Analyst, you will get hands-on with some of our most exciting initiatives yet.
You will help mature our core compliance frameworks and play a key role in shaping our approach to AI security and governance. From risk-assessing new AI systems to helping us use AI to automate manual GRC workflows, your work will directly strengthen our security posture.
We are an open, inclusive and collaborative team of security enthusiasts who work closely with engineers and data scientists to solve complex problems. If you are a pragmatic technologist who loves balancing risk with fast-paced innovation, we want you to bring your unique perspective and ideas to our team.
You will partner with our security, risk and engineering teams to mature our core compliance programs and safely adopt exciting new AI technologies, directly strengthening the trust millions of people place in our platform.
- Drive our ongoing compliance efforts for major industry standards, including SOC 2, ISO27001, ISO42001 and PCI DSS, ensuring we consistently meet commitments to our customers.
- Evaluate and manage the security risks associated with our new artificial intelligence and machine learning systems, allowing our product teams to innovate safely and securely.
- Streamline how we assess the security of our vendors and third-party tools, paying special attention to how we safely integrate external AI technologies into our business.
- Help develop our internal standards for artificial intelligence, keeping us ahead of the curve on new global regulations like the EU AI Act.
- Identify opportunities to replace manual, repetitive risk management tasks with smart, AI-driven automation.
- Refresh our security policies and public-facing documents to clearly communicate our security posture to our customers, partners and auditors.
- Act as an advocate for security awareness across the business, helping colleagues understand how balancing risk and innovation leads to better, safer products.
Who you are:
- You have solid experience managing and auditing against core compliance frameworks, such as SOC 2, ISO27001 and PCI DSS.
- You are well-versed in risk management processes, including risk identification, third-party risk management and vendor security due diligence.
- You have practical experience developing, implementing and managing security policies and procedures.
- You are a pragmatist who knows how to balance security risks with the pace of innovation, bringing a solid understanding of cloud environment risks.
- Bonus points if you are familiar with emerging AI governance frameworks (like the EU AI Act, NIST AI RMF, and ISO/IEC 42001) or have a strong desire to learn them on the job.
- Bonus points if you have experience with, or a keen interest in, using AI to automate manual tasks and drive efficiencies in GRC workflows.
What’s in it for you:
- A range of flexible working options to dedicate time to what matters to you.
- Competitive compensation package + bonus.
- 25 days holiday per year, increasing to 28 days after 2 years of employment.
- Two (paid) volunteering days a year to spend your time giving back to the causes that matter to you and your community.
- Rich learning and development opportunities are supported through the Trustpilot Academy and Blinkist.
- Pension and life insurance.
- Health cash plan, online GP, 24/7, Employee Assistance Plan.
- Full access to Headspace, a popular mindfulness app to promote positive mental health.
- Paid parental leave.
- Season ticket loan and a cycle-to-work scheme.
- Central office location complete with table tennis, a gaming corner, coffee bars and all the snacks and refreshments you can ask for.
- Regular opportunities to connect and get to know your fellow Trusties, including company-wide celebrations and events, ERG activities, and team socials.
- Access to over 4,000 deals and discounts on things like travel, electronics, fashion, fitness, cinema discounts, and more.
- Independent financial advice and free standard professional mortgage broker advice.
- Talent acceleration programs: Fast-track your career with our tailored development programs designed to support growth at whatever stage of your career.
Trustpilot is committed to creating an inclusive environment where people from all backgrounds can thrive and where different viewpoints and experiences are valued and respected. Trustpilot will consider all applications for employment without regard to race, ethnicity, national origin, religious beliefs, gender identity or expression, sexual orientation, neurodiversity, disability, age, parental or veteran status. Together, we are the heart of trust.
Information Security Governance, Risk and Compliance Analyst in London employer: Trustpilot
At Trustpilot, we pride ourselves on being an exceptional employer, offering a vibrant and inclusive work culture that fosters collaboration and innovation. With a strong focus on employee growth, we provide rich learning opportunities through the Trustpilot Academy, flexible working options, and a competitive benefits package, including generous holiday allowances and wellness initiatives. Join us in our central office location, where you can enjoy a dynamic environment filled with engaging activities and connect with a diverse team dedicated to making a meaningful impact.
StudySmarter Expert Advice🤫
We think this is how you could land Information Security Governance, Risk and Compliance Analyst in London
✨Tip Number 1
Network like a pro! Reach out to current or former employees at Trustpilot on LinkedIn. A friendly chat can give you insider info and maybe even a referral, which can really boost your chances.
✨Tip Number 2
Prepare for the interview by diving deep into Trustpilot's mission and values. Show us how your experience aligns with our goal of being the universal symbol of trust. We love candidates who are genuinely passionate about what we do!
✨Tip Number 3
Practice common interview questions related to governance, risk, and compliance. Think about how you can demonstrate your experience with frameworks like SOC 2 and ISO27001. We want to see how you tackle real-world challenges!
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows us you’re serious about joining our team at Trustpilot.
We think you need these skills to ace Information Security Governance, Risk and Compliance Analyst in London
Some tips for your application 🫡
Tailor Your Application:Make sure to customise your CV and cover letter to highlight your experience with compliance frameworks like SOC 2 and ISO27001. We want to see how your skills align with our mission at Trustpilot!
Show Your Passion for Security:Let us know why you're excited about the role! Share your thoughts on balancing risk with innovation, especially in the context of AI technologies. We love seeing genuine enthusiasm for what we do.
Be Clear and Concise:When writing your application, keep it straightforward. Use clear language and avoid jargon where possible. We appreciate a well-structured application that gets straight to the point!
Apply Through Our Website:Don’t forget to submit your application through our website! It’s the best way for us to receive your details and ensures you’re considered for the role. We can’t wait to hear from you!
How to prepare for a job interview at Trustpilot
✨Know Your Compliance Frameworks
Make sure you brush up on your knowledge of SOC 2, ISO27001, and PCI DSS. Be ready to discuss how you've managed and audited against these frameworks in the past, as this will show your practical experience and understanding of compliance.
✨Showcase Your Risk Management Skills
Prepare examples of how you've identified and managed security risks, especially in relation to third-party vendors. Highlight any specific tools or processes you've used to assess vendor security, as this is crucial for the role.
✨Demonstrate Your Pragmatic Approach
Trustpilot values a balance between security and innovation. Be prepared to discuss how you've successfully navigated this balance in previous roles, particularly when it comes to adopting new technologies like AI.
✨Engage with the Team Spirit
Since Trustpilot emphasises collaboration, be ready to share how you've worked with cross-functional teams in the past. Show your enthusiasm for being part of an open and inclusive team, and how you can contribute to that culture.
