Information Security & Compliance Lead

<p class="text-muted mb-3">Information Security & Compliance Lead</p>

<p class="text-muted mb-3">Are you an experienced information security or compliance professional who believes compliance should help a business rather than slow it down?</p>

<p class="text-muted mb-3">We’re working with a fast-growing, well-invested B2B SaaS company specialising in business resilience and modern compliance across information security, data privacy and AI governance.</p>

<p class="text-muted mb-3">Their global platform is used by more than 65,000 people and helps organisations manage standards and regulations including ISO 27001, ISO 27701, ISO 42001, NIS2 and other increasingly complex governance</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements.</h5>

<p class="text-muted mb-3">They’re looking for an Information Security & Compliance Lead to take ownership of their internal compliance programme. There’s more to this than maintaining certifications and keeping documentation up to date. The business is at the forefront of modern compliance, and</p>

<p class="text-muted mb-3">this is an opportunity to put simple, practical and commercially valuable governance into practice.</p>

<p class="text-muted mb-3">The Role</p>

<p class="text-muted mb-3">You’ll own the company’s compliance posture across ISO 27001, ISO 27701, ISO 42001, Cyber Essentials and emerging standards, using its own SaaS platform to build a best-practice implementation across information security, privacy and AI governance.</p>

<p class="text-muted mb-3">The business wants compliance to be light-touch, accessible and easy for people to follow. Your job will be to make governance part of how people work, rather than an extra layer of process, while helping the organisation become stronger, support its customers and create commercial value.</p>

<p class="text-muted mb-3">Your responsibilities will include:</p>

<ul class="list-unstyled job-desc-list mb-3">

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Owning and continually improving the company’s multi-framework compliance programme.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Leading internal and external audit cycles.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Maintaining the risk register, Statement of Applicability and supporting compliance documentation.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Simplifying internal governance processes and embedding them into everyday ways of working.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Becoming one of the platform’s most knowledgeable internal users and feeding practical compliance experience back into the Product team.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Working with Customer Success and Professional Services to turn internal best practice into approaches customers can use.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Showing customers and prospects what effective modern governance looks like in practice.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Advising senior leadership on governance, risk and compliance.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Keeping up with emerging standards and regulatory developments.</span></li>

</ul>

<p class="text-muted mb-3">There’s also scope to become a recognised voice in the industry through customer conversations, conferences, LinkedIn, podcasts, industry reports and other thought-leadership activity. You’ll be representing a business working at the heart of information security, privacy and AI governance.</p>

<p class="text-muted mb-3">You don’t need to be an established speaker. They’re looking for someone who enjoys discussing the subject and would like to get involved.</p>

<p class="text-muted mb-3">What We’re Looking For</p>

<ul class="list-unstyled job-desc-list mb-3">

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Strong practical experience across information security, governance, risk and compliance, with significant hands-on ISO 27001 experience.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Experience managing a multi-framework compliance environment, including at least one additional framework or standard such as ISO 27701, ISO 42001, SOC 2, Cyber Essentials, NIS2 or DORA.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Experience within SaaS, technology or another relevant product-led environment.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>A track record of making compliance simpler and more accessible to non-specialists.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>A pragmatic approach to governance, avoiding unnecessary process and bureaucracy.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Confidence working with senior stakeholders and teams outside compliance.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>An understanding of how good compliance and governance can create wider business and customer value.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Working knowledge of the UK and EU regulatory landscape.</span></li>

</ul>

<p class="text-muted mb-3">AI Governance</p>

<p class="text-muted mb-3">Experience with AI governance or ISO 42001 would be a major advantage, although you don’t need to be an ISO 42001 expert.</p>

<p class="text-muted mb-3">The business is doing some particularly interesting work in this area and recognises that governing AI can require a different approach from traditional information security. Previous exposure to AI governance, an understanding of those differences or a genuine interest in developing your knowledge would all help you stand out.</p>

<p class="text-muted mb-3">The Opportunity</p>

<p class="text-muted mb-3">You’ll be running compliance within a SaaS company whose entire proposition is built around helping organisations improve information security, privacy, AI governance and business resilience. Governance isn’t just a supporting function here; it’s central to what the business does.</p>

<p class="text-muted mb-3">That gives your experience a wider application. Alongside shaping the internal compliance programme, you can influence how the platform develops, how customers implement and manage governance, and how the business talks about modern compliance. You’ll also help establish what best practice looks like in emerging areas such as AI governance.</p>

<p class="text-muted mb-3">For someone who believes compliance should be simple, useful and commercially valuable, rather than complicated for the sake of it, there’s a lot to get involved in.</p>

<p class="text-muted mb-3">Additional Information</p>

<ul class="list-unstyled job-desc-list mb-3">

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Full-time, permanent position, fully remote within the UK.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>The role sits within the Product team.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>25 days’ holiday plus bank holidays, increasing with service.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>NEST pension and Perkbox benefits.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Development and training support.</span></li>

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Company events and opportunities to collaborate with the wider team.</span></li>

</ul>

<p class="text-muted mb-3">This would suit someone with strong information security and ISO experience who wants to do more than maintain a compliance programme. You’ll have the opportunity to shape how modern governance is done, influence a SaaS product used globally and build your own voice in the future of information security and AI governance</p>