Security specialist, GRC (UK)

WRITER is a leading enterprise in AI-powered work, and we're seeking a Security Specialist, GRC to build the frameworks that ensure our AI platform earns and keeps the trust of the world's most demanding enterprises.

Requirements

• 2+ years of hands-on experience in GRC, security compliance, or audit roles within fast-paced tech companies or startups
• Deep working knowledge of security frameworks and certifications including SOC 2 Type II, ISO 27001, GDPR, CCPA, and familiarity with emerging AI governance requirements
• Strong technical literacy that allows you to evaluate cloud security architectures, understand API security, review access control implementations, and have credible conversations with engineers about security controls
• Excellent project management abilities with the skill to juggle multiple audits, customer questionnaires, policy updates, and remediation initiatives simultaneously
• Outstanding communication skills that enable you to explain complex compliance requirements in clear, actionable language to technical and non-technical audiences alike
• Natural curiosity about AI governance and emerging regulatory landscape including AI-specific frameworks, model risk management, data privacy implications of AI training, and responsible AI principles
• Alignment with WRITER's values of Connect (building trusted relationships with customers, auditors, and cross-functional teams), Challenge (pushing beyond checkbox compliance to create governance that truly reduces risk), and Own (taking full accountability for WRITER's security posture and customer trust)

Benefits

• Generous PTO, plus company holidays
• Comprehensive medical and dental insurance
• Paid parental leave for all parents (12 weeks)
• Fertility and family planning support
• Early-detection cancer testing through Galleri
• Competitive pension scheme and company contribution
• Annual work-life stipends for: Wellness stipend for gym, massage/chiropractor, personal training, etc., Learning and development stipend, Company-wide off-sites and team off-sites