Operations - Compliance and Security Specialist, Konfir

• 1–3 years' experience in a compliance, security, or risk-related role ideally in a fintech, startup, or SaaS company.
• Interest in automation and tools whether you've used platforms like Make.com, Zapier, Drata, or you're just keen to learn.
• Strong knowledge of UK GDPR, DPA 2018, and relevant standards (e.g. ISO27001)
• Someone who is detail-oriented but pragmatic able to spot gaps and improve processes without over-complicating.
• Clear communication skills you’ll be helping translate complex requirements into plain language and practical steps.

Desirable

• Konfir is growing fast and we’re doing it with a lean team and a strong focus on automation, clarity, and scalable controls. We’re looking for a smart, detail-oriented Compliance & Security Analyst to join our team and support day-to-day compliance, cyber security, and risk operations as we scale
• We want someone who can identify where human oversight is needed and where it isn’t. You'll work across teams to design compliance systems that support rather than slow us down. This role suits someone collaborative, comfortable with ambiguity, and motivated by the challenge of building secure, trustworthy foundations without bureaucracy
• You’ll work alongside our CISO/DPO and Head of Operations to help own and improve sensible, automated, and proportionate controls across the business. This role is perfect for someone early in their compliance or security career, ideally with experience in a startup or fintech environment, who’s eager to make an impact without being bogged down by bureaucracy.
• Support the delivery and monitoring of compliance frameworks (e.g. UK GDPR, ISO27001, FCA AISP).
• Develop, maintain, and continuously improve internal policies, procedures, and controls across data protection, information security, and regulatory risk
• Help track and close monthly and ongoing control actions (using tools like Google Sheets, Make.com, and monday.com).
• Conduct regular compliance monitoring and internal audits, escalating issues where required
• Stay up to date with regulatory changes, assessing their impact and driving rapid alignment
• Contribute to the automation of compliance processes and reporting, using low-code/no-code tools where appropriate.
• Assist with data protection tasks like subject access requests, DPIAs, ROPAs, and breach handling.
• Participate in cyber security operations, including vendor due diligence, access reviews, and security checklists.
• Collaborate with product, engineering, and ops teams to ensure compliance and security are embedded early not bolted on later.

• 30 minute intro with the Head of Operations
• Task based interview
• Meet key members of the Leadership Team