plentific - Compliance Manager
Requirements
• 3+ years in a compliance, risk or information governance role, ideally in SaaS, fintech or another regulated tech business. • Good working knowledge of KYC checks, including sanctions, PEP and beneficial ownership screening, and the tools used to run them. • Hands-on experience of UK GDPR and the Data Protection Act 2018: DPIAs, data subject requests, breach handling and supplier due diligence. • Experience running or supporting an ISO 27001 ISMS through certification and surveillance audits. • A track record of managing a business risk register and conducting internal audits. An ISO 27001 Internal Auditor or Lead Auditor qualification helps. • A CIPP/E or CIPM certification is beneficial. • AI training credentials are beneficial, such as the IAPP AIGP or an ISO/IEC 42001 Lead Implementer course. • You use AI tools daily and can give real examples of how they made your work faster or better. • Clear writing, and the confidence to explain a compliance requirement to an engineer, a salesperson or a client. • Experience of AI governance, such as the EU AI Act, ISO/IEC 42001 or the NIST AI Risk Management Framework. Not essential: if you don’t have it yet, you’ll learn it on the job.
Responsibilities
• KYC and due diligence • Run KYC checks on customers, suppliers and service providers: identity, ownership, sanctions, PEP and adverse media. • Set risk-based rules for when enhanced due diligence applies, and escalate cases that need a decision. • Keep KYC records complete and ready for audit or client review. • Data protection • Run day-to-day UK GDPR and Data Protection Act 2018 compliance: records of processing, DPIAs, retention and data subject requests. • Review data processing agreements and supplier privacy terms with the legal team. • Manage personal data incidents from first report to close, including the decision on whether to notify the ICO within 72 hours. • Information security (ISO 27001) • Maintain the ISMS with Information Security Team: Statement of Applicability, risk treatment plan, control owners and evidence, etc. • Lead surveillance and recertification audits with our external certification body. • Answer security and compliance questionnaires from housing association and local authority clients. • Business risk and internal audit • Own the business risk register. Work with risk owners to rate, treat and report risks to the General Counsel and leadership team. • Plan and run an annual internal audit programme across information security, data protection and KYC, and track every finding to closure. • Report on compliance status and open risks in a format leadership can act on. • Policies, training and AI • Keep compliance policies current, short and written so people actually read them. • Run awareness training on data protection, information security and KYC. • Use AI tools every day to draft policies, review questionnaires and contracts, gather audit evidence and track regulatory change. Automate the repetitive checks. • Help shape how Plentific governs its own use of AI.
Benefits
• You'll join a scale up with ambitious growth plans and the backing to deliver them, in a role where you'll impact the future of housing: • Competitive base salary with uncapped OTE • 25 days annual holiday • Flexible working, including a work abroad scheme • Private healthcare for you and immediate family, with discounted gym membership, optical, dental and private GP • Enhanced parental leave • Pension scheme • Employee assistance programme • Company volunteering day and charity salary sacrifice scheme • Learning platform powered by Udemy • Referral bonus and charity donation if someone you introduce joins • Season ticket loan, Cycle to Work, electric vehicle and Techscheme programmes • Company-sponsored lunches, dinners and social events, plus a fully stocked kitchen
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT