Salary not listed
GRC Engineer
OtherHybrid — London
Published on 2026-11-02
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Own and scale incident.io’s compliance programme, customer security questionnaires, and supporting evidence. Automate GRC work with code, AI-powered tools, and workflows, while helping improve the company’s own GRC product.
About the company
incident.io is an incident management platform that helps engineering teams declare, coordinate, and learn from production incidents with structured workflows and tooling.
The team
Product Development and Security
What you'll do
- Help complete and improve the ISO 27001 programme
- Run an ISO 42001 gap assessment during the first two quarters
- Automate audit evidence collection and customer questionnaire workflows
- Answer customer security questionnaires accurately and in plain English
- Drive product improvements based on internal use of incident.io for security work
- Collaborate with security, engineering, legal, and product
What we're looking for
- Experience running or contributing to a compliance programme and supporting an audit, ideally ISO 27001
- Ability to write code such as Python or Go, or build workflows
- Interest in using AI and agents to reduce operational toil
- Able to explain controls to engineers and risks to executives
- Comfortable working autonomously without detailed specifications
- Able to communicate customer security answers clearly and accurately
Nice to have
- ISO 42001 or AI governance experience
- SOC 2 or GDPR experience
- Experience at a fast-growing SaaS company
Benefits
- Private medical insurance
- Competitive annual leave
- First Friday of every month off
- Enhanced pension
- Equity
- Unlimited AI spend
- Generous parental leave
- £1,000 setup budget and £500 annual personal development budget