Hybrid role to be based in our Edinburgh office.

About us

Seccl is the Octopus-owned embedded investment platform that’s on a mission to helping more people to invest – and invest well.

We’re B-Corp certified with an amazing product-market fit, impressive early traction and the potential to transform an outdated industry, for the better. We've been growing fast and will scale even faster over the next few years.

We’re also proud to be part of Octopus, the £multi billion group that's on a mission to breathe new life into broken industries, through companies like Octopus Energy, Octopus Investments and Octopus Money.

Check out the Seccl website for the latest on our products and our mission to shape the future of investments.

The role

Looking to start or build your career in information security and data protection?

We’re looking for an Information security and data protection analyst to join our Governance, Risk and Compliance team. You’ll report into our Head of Information security and data protection officer, who’ll support your development and help you build your knowledge as you grow into the role.

You’ll be part of our 2nd Line of Defence team, helping Seccl protect its people, customers and operations. You don’t need to come with lots of technical experience. What matters most is that you’re curious, proactive, a strong communicator and keen to learn.

Over time, you’ll develop valuable knowledge across cybersecurity, privacy and operational resilience, with the opportunity to become a subject matter expert in how we manage information security and data protection at Seccl.

On a typical day you will...

Be a first point of contact for information security and data protection queries from across the business
Support with GDPR-related activity, including data subject access requests and data subject rights
Help with data protection impact assessments and legitimate interest assessments
Support the maintenance of our Information Security Management System
Help facilitate information security risk assessments
Advise teams on the appropriate use of personal data
Support information security and data protection governance
Keep an eye on regulatory developments, including GDPR and DORA
Help promote information security and data protection awareness across Seccl

This role’s for you if...

You’re a strong communicator who enjoys building relationships and working with people from different backgrounds
You’re comfortable being a first point of contact and helping people find the right answer
You have a genuine interest in information security, data protection, resilience or technology
You’re proactive and happy to take initiative, rather than waiting to be told what to do
You’re curious, motivated and keen to learn
You enjoy solving problems, asking good questions and working with others
You’re open to learning technical concepts and applying them in a real business setting. We’ll support you with the training you need

This role isn’t for you if...

You rely on a lot of top-down direction. Here, you’ll have a lot of freedom and ownership of your role, and you’ll be expected to shape your own progression
You’re not comfortable working in a fast-paced environment. Our speed and scalability are what set us apart; you need to be able to act quickly and think on your feet
You struggle to follow through on ideas. We value people who do what they say they will. If you care about something, you have the freedom here to make it happen
You don’t like change. You’ll get on great here if you relish the ambiguity of rapid growth and are willing to embrace uncertainty

What’s in it for you…

We offer a generous mix of benefits for the things that really matter to our people, including:

💰 A salary between £32,000 and £40,000 – dependant on experience + reviewed annually

🌴 27 days holiday + bank holidays (some can be flexible) + day off on your birthday + three days (full time) per year for Dependant leave

💙 Two volunteering days per year

🌎 Option to work abroad for up to six weeks a year

🌟 Secclbrate - our recognition programme that offers a mix of flexible rewards including extra pay, additional holiday and increased learning budget

🏅 Length of service award – one month paid sabbatical at eight years

✅ 6% employer pension contribution, and life assurance

🏥 Private medical insurance with AXA Health

👪 Enhanced Parental leave

💻 MacBook and up to £500 home office set up budget

📖 £750 per person learning budget

🌻 Health and wellbeing initiatives including free therapy via Wellness Cloud, mental health support via Headspace

🌱 Strong financial wellbeing focus including access to Octopus Money, Octopus Share Incentive Plan and will writing offering via Octopus Legacy

🎁 Perkbox – Flexi-points giving you a range of discounts and perks including free weekly coffee, gym and retail discounts

🚲 Access to initiatives like Cycle to Work and Octopus Electric Vehicle Leasing

Our culture

We're proud to put people first, creating a culture where we truly listen to what matters most to them. Our transparent and inclusive environment encourages diversity of thought, challenge and experimentation.

Check out our Glassdoor page for the latest reviews or our LinkedIn for company updates and insights from the team.

Interview process

Interviewing is a two-way thing, and we want you to have the time and opportunity to get to know us, as much as we are getting to know you. Our interviews are conversational, so come with questions and be curious. In general, you can expect the interview process to look a bit like this, (following an initial chat with one of our Talent team):

First stage – one-hour competencies-based interview with the hiring manager and another member of the team
Second stage – 30 minute team focused interview with the Chief risk officer and Head of operational resilience

⏳ We’ll only close this role once we have enough applications for the next stage. Please submit your application as soon as possible to make sure you don’t miss out and you should expect to hear back from us within one to two weeks of applying.

🌈 Our aim is to build a diverse and inclusive company of awesome people, with unique skills, passions and experiences. All applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, or veteran, neurodiversity or disability status.

If this sounds like your kind of thing, we encourage you to apply even if you don’t tick every box. We’d love to hear from you!

Information security & data protection analyst