Security Risk and Compliance Management Specialist V

Rackspace Technology

. Advocate in development of the overall information security program globally .

Posted 11/9/2026full-timeCardiff • United KingdomMid-LevelSenior💰 £61,388 - £79,619 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expert-level knowledge in IT Risk Management, Governance, Risk and Compliance, and Information Security, with a strong focus on regulatory compliance and risk assessment methodologies. Capable of leading cross-functional teams and developing enterprise compliance solutions while providing data-driven insights to senior leadership.

Highest-signal resume keywords

IT Risk ManagementGovernance, Risk And ComplianceInformation SecurityRegulatory Compliance ExpertiseRisk Assessment Methodologies

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentData PrivacyVendor ManagementBusiness Continuity ManagementInternal Control TestingPolicy DevelopmentAudit ExecutionData AnalyticsOperational Risk ManagementCompliance Solutions Development

Soft Skills

Problem SolvingCross-Functional LeadershipCommunication StrategiesTeam CollaborationStakeholder Engagement

Tools & Technologies

ISO 27001ISO 9001ISO 14001ISO 18001Cyber Essentials+NHS DSPTSOC1SOC2SOC3PCI

Certifications & Qualifications

CRISCCISMCISSPCISAITILGRCPISSEPGCEDGCIACGEIT

Industry Keywords

UK NCSC Security GuidanceFISMASafe HarborAudit Standard #70GDPRFEDRAMCDSACyberGRXRegulatory LandscapeCompliance Audits

Tech Stack

Tools & technologies

JavaJavaScriptPythonC++

About the role

Key responsibilities & impact

Advocate in development of the overall information security program globally
Create and perform global IT Risk and Compliance assessments
Assist in developing and executing information security, compliance, and risk best practices globally through audits, assessments, and policy-making
Develop systems to control and monitor assets for operational risk
Evaluate ways to reduce exposure to financial loss, reputational damage, and business continuity loss
Set operational risk management policies and inform senior leaders and control partners about local and global risk exposure
Lead cross-functional teams in risk framework and compliance solution strategy and implementation
Perform complex work assignments and resolve problems independently
Serve as subject matter expert for regulatory, legal, and enterprise policy compliance
Oversee operational and non-operational risk management programs
Provide data and analytics to the risk officer and risk committees
Direct analysis and root-cause identification
Develop enterprise compliance solutions
Develop risk assessment processes, charters, policies, methodologies, and reports
Lead cross-functional workgroups, communications strategies, and planning meetings
Develop executive-level risk data and analytics
Develop information security, IT risk, and compliance training and communications
Monitor the competitive and regulatory landscape and company challenges
Coordinate regulatory requirements and requests and ensure examinations are executed
Conduct IT risk and information security due diligence for vendors and third parties
Conduct risk assessments and document policy or standard deviations
Ensure remediation plans meet business objectives and follow through with business owners
Provide security, privacy, and regulatory compliance expertise to Sales, Marketing, Product Development, Legal, and Policy teams
Analyze risk rating and risk appetite and provide data-driven summaries to business leaders
Document and analyze findings from internal or external testing
Assist policy personnel in technical discussions with policymakers, industry bodies, and third parties
Provide feedback on trust-related product features and support regional security and compliance accreditation projects
Develop internal control testing and documented processes
Update internal control matrices
Adapt and create processes and reporting metrics
Act as conduit between internal control owners and external auditors
Execute internal customer audits, including scheduling, presenting the Rackspace compliance portfolio, and overseeing customer visits
Assist in annual audits for ISO 27001, ISO 9001, ISO 14001, ISO 18001, IRAP-AUS, Cyber Essentials+, NHS DSPT, SOC1, SOC2, SOC3, PCI, HIPAA, HiTrust, and CyberGRX
Conduct annual audits for GDPR, FEDRAM, and CDSA

Requirements

What you’ll need

Expert-level knowledge of UK NCSC security guidance and requirements
Expert-level knowledge of PCI, ISO27001, Audit Standard #70, Safe Harbor, HIPPA and FISMA
Expert-level knowledge of IT Risk Management, Governance, Risk and Compliance, Information Security, Data Privacy, Vendor Management, and/or Business Continuity Management
CRISC, CISM, CISSP - highly preferred
Java, C++, Python, JavaScript, Network+, CCNP, ISA, CAP, CISA, ITIL, GRCP, ISSEP, GCED, GCIA and/or CGEIT - preferred
Responsible for adhering to company security policies and procedures as directed

Benefits

Comp & perks

Annual bonus or incentives
Equity awards
Employee Stock Purchase Plan (ESPP)
Equal employment opportunity
Disability or special-needs accommodation