# GRC Associate at Trainline

Trainline is hiring a GRC Associate in London, United Kingdom. It pays £55k-£65k a year and Level rates it Little AI ●○○○; you can [apply on Trainline](https://jobsbylevel.com/go/e76c58c6-b498-4787-af23-b64bcef82e80?utm_medium=ai-agent).

AI Level 1, AI centrality 24 out of 100. Remote (London).

## Details

- Company: [Trainline](https://jobsbylevel.com/companies/trainline)
- AI level: AI Level 1 (score 24 out of 100)
- Location: Remote (London)
- Salary: £55k-£65k
- Posted: November 12, 2026
- Apply: https://jobsbylevel.com/go/e76c58c6-b498-4787-af23-b64bcef82e80?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=grc-associate-at-trainline-157cf8

## Description

About us At Trainline, our purpose is to empower greener travel choices, connecting people and places. Trainline enables millions of travellers to find and book the best value tickets across carriers, fares, and journey options through our highly rated mobile app, website, and B2B partner channels. Great journeys start with Trainline 🚄 We’re Europe’s leading independent rail platform, helping millions of travellers find and book the best-value rail and coach journeys across our app, website and partner channels. Our job is to make the green travel choice the best choice. By building a better train travel experience, we help more people choose rail - creating a positive impact for customers, our business and the planet. We’re a team of more than 1,000 Trainliners from over 50 nationalities, working across London, Paris, Barcelona, Milan, Edinburgh and Madrid. Now is a brilliant time to join us and help shape the future of travel. Introducing the GRC team 👋 Trainline is investing in the next stage of our security programme, and we’re looking for a Security GRC Associate to help strengthen how we manage third-party security risk and assurance. You’ll join our Information Security team, reporting to the GRC Manager. Your main job will be making sure the suppliers, technology partners and service providers we rely on meet the security standard our customers expect. You’ll work with Procurement, Legal, Privacy, Engineering, Product and teams across the business to manage supplier risk end to end, from onboarding and first assessment through to ongoing assurance and reassessment. You’ll also support our wider governance and compliance programme, including ISO 27001 and our unified internal control framework. And you’ll help us rethink how GRC gets done, using automation and AI to cut manual effort and give the business a clearer view of risk. As a Security GRC Associate at Trainline, you will... 🚄 Run third-party security risk assessments for new and existing suppliers, including SaaS and cloud providers, technology partners and business-critical vendors Review supplier assurance evidence, such as ISO 27001 certificates, SOC 2 reports, security questionnaires and penetration test summaries, and judge whether the controls in place are adequate Identify and document third-party security risks and recommend proportionate ways to reduce them Help assess the security risks of AI tools, applications and third-party AI integrations, working with the wider GRC and InfoSec teams to review controls and track remediation Partner with Procurement, Legal, Privacy and Engineering to build security requirements into supplier onboarding, procurement and contract renewals Keep third-party risk records up to date, track remediation actions, and escalate material risks to the right stakeholders and governance forums Help shape a risk-based approach to ongoing supplier assurance, including periodic reassessments and monitoring of critical suppliers Help improve our Third-Party Risk Management framework, including supplier risk classification, assessment methods, questionnaires and reporting Support ISO 27001 assurance work, such as control assessments, evidence gathering, audit preparation and remediation tracking, and help maintain our unified internal control framework Help build and improve our GRC tooling, using automation and AI to speed up questionnaire reviews, evidence analysis, control mapping and risk reporting We’d love to hear from you if you have... 🔍 Experience in information security, GRC, third-party risk management or a related cyber security discipline Hands-on experience running third-party security assessments, reviewing supplier assurance documentation or supporting vendor risk processes Working knowledge of security standards and frameworks, particularly ISO 27001, ISO 27002 and NIST CSF Experience working with stakeholders across functions, such as Procurement, Legal, Technology and business teams Strong analytical and

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/grc-associate-at-trainline-157cf8

Source: https://jobsbylevel.com/jobs/grc-associate-at-trainline-157cf8

## Cite this page

Level. https://jobsbylevel.com/jobs/grc-associate-at-trainline-157cf8.

Get job alerts: https://jobsbylevel.com/newsletter