GRC and Security Lead

About Amiqus

Amiqus is the UK’s most trusted compliance and onboarding platform, enabling simple, fast and secure access to products and services online. Whether moving home, changing jobs or looking for professional help, our software makes it easy for everyone involved.

We’re trusted by Governments, NHS, Banks and 600+ regulated organisations across sectors in the UK to help people get to work on the things that matter, faster.

Why join us now?

• We’re one of the UK’s fastest growing tech companies, ranked by Deloitte Fast50 and part of Tech Nation’s Future Fifty 2024 cohort. 
• We’re scaling sustainably, backed by external investment on a 10x plan tracking from £5m ARR, with expectations to exceed £50m ARR within four years.
• We’re purpose driven, ambitious and make an impact in the work we do which is underpinned by trust in our systems and infrastructure. 
• As we succeed, we share in our success across all levels and roles.

Our offer

• You’ll work with outstanding people across teams of up to 8-10 in a cross functional approach. The work you’ll do will be challenging but with the collaborative support of other high performing people.
• Competitive salary plus share options – build your career and make progress as we scale
• 12 development days each year, designed for up-skilling and meaningful growth – plus a learning budget to support relevant courses and development opportunities 
• Quarterly in-person meetups and team events to celebrate successes, review team performance and implement change linked to our growth plans
• Private health cover with Vitality and a suite of insurance benefits for peace of mind
• 34 days of annual leave to rest and recharge 
• 5% matched pension contribution on qualifying earnings – look after your future self

About the role

The GRC & Security Lead at Amiqus is the hands-on leader of our Security, Audit, Risk and Compliance (SARC) team – with a particular focus on cyber security and risk management. You’ll lead both internal and external audits, and oversee the protection, governance and security of our data.

Your responsibilities:

• Oversee cyber security, including security-by-design in product development, incident management, business continuity testing and third-party risk management.
• Act as 2nd line of defence, ensuring risks are identified, documented and effectively managed across all business areas.
• Own and maintain key policies, internal tools (including Drata), and governance processes across security, audit, risk and compliance.
• Lead and support internal and external audits, ensuring readiness, action tracking, regulatory awareness and continuous improvement.
• Act as compliance SME, providing guidance on projects, product changes and organisational initiatives, and representing Amiqus within relevant industry groups and forums.
• Act as Incident Commander for Major and High category incidents in the business while overseeing business continuity and disaster recovery processes/ robustness. 

In a perfect world, we’d hire someone who has:

• 5+ years’ experience leading and implementing security controls – from information and data security to wider organisational protection
• Strong cloud security experience, able to take a ‘red team’ based approach to identify and stress test for potential threats
• Practical expertise with ISMS frameworks e.g. ISO 27001
• Relevant certifications (CISM, CRISC, CISSP, ISO 27001 or similar) to back up your craft
• Hands-on experience with GRC platforms, using them to streamline workflows and clearly communicate security posture
• Ability to identify, assess and explain security threats and vulnerabilities both cloud based and physical
• Excellent problem-solving skills and sound judgement when making decisions under pressure
• Clear, concise communication skills – written, verbal and client-facing, with experience in reporting to senior exec /  board level
• The confidence to lead client conversations, representing Amiqus as the primary SARC point of contact

This is a fast-growing, scale-up environment – not a large scale corporation. Things move quickly. 

Whilst we have structure and excellent people –  you’ll need to be able to deliver and implement things directly so we’re looking for someone who’s energised by making change, having specific impact and scaling themselves as we grow on our 10x plan.

Talented people make Amiqus and staying true to our culture is important as we continue to develop and grow. Most importantly, this role will be filled by someone who shares the same values and work ethic as we do.

Our interview process

We think it’s important to have an open and transparent process. The process might vary slightly depending on role and level but here’s what to expect:

• An initial conversation with a member of the people experience team 
• Interview with a senior team member/hiring manager and one other team member
• Structured Panel interview and presentation for shortlisted candidates (if applicable)
• References and background checks followed by role offer

If this sounds like the role for you, you can apply directly here.

Diverse perspectives and people of all backgrounds are welcome at Amiqus. We recognise that building an inclusive workplace requires proactivity and commitment. We acknowledge our moral and legal responsibilities to promote equal opportunities and pursue equality in our work.

If we can make preparations to make sure you have a positive interview experience, please let us know.

As you might expect, we care about privacy and we have a privacy policy specific for job applicants which explains how we handle your information and data.