Compliance Lead: KYC, Data Protection & ISO 27001 Expert

Sponsor Finder; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Private healthcare

Udemy learning

25 days holiday

Pension scheme

Flexible working

Cycle to Work

Job summary

Plentific is seeking an experienced compliance professional to lead day-to-day KYC, data protection and ISO 27001 governance across a growing real estate SaaS business.

You will own the compliance programme, run audits, review supplier terms, and guide teams on data processing and AI-related policy. Flexible working is available, with international opportunities and a broad impact on trust and risk management.

Qualifications

• 3+ years in a compliance, risk or information governance role, ideally in SaaS, fintech or another regulated tech business.
• Good working knowledge of KYC checks, including sanctions, PEP and beneficial ownership screening, and the tools used to run them.
• Hands-on experience of UK GDPR and the Data Protection Act 2018: DPIAs, data subject requests, breach handling and supplier due diligence.
• Experience running or supporting an ISO 27001 ISMS through certification and surveillance audits.

Responsibilities

• Run KYC checks on customers, suppliers and service providers: identity, ownership, sanctions, PEP and adverse media.
• Set risk-based rules for when enhanced due diligence applies, and escape cases that need a decision.
• Keep KYC records complete and ready for audit or client review.
• Run day-to-day UK GDPR and Data Protection Act 2018 compliance: records of processing, DPIAs, retention and data subject requests.
• Review data processing agreements and supplier privacy terms with the legal team.
• Manage personal data incidents from first report to close, including the decision on whether to notify the ICO within 72 hours.
• Maintain the ISMS with Information Security Team: Statement of Applicability, risk treatment plan, control owners and evidence.
• Lead surveillance and recertification audits with our external certification body.
• Answer security and compliance questionnaires from housing association and local authority clients.
• Own the business risk register. Work with risk owners to rate, treat and report risks to the General Counsel and leadership team.
• Plan and run an annual internal audit programme across information security, data protection and KYC, and track every finding to closure.
• Report on compliance status and open risks in a format leadership can act on.
• Keep compliance policies current, short and written so people actually read them.
• Run awareness training on data protection, information security and KYC.
• Use AI tools every day to draft policies, review questionnaires and contracts, gather audit evidence and track regulatory change. Automate the repetitive checks.
• Help shape how Plentific governs its own use of AI.

Skills

KYC compliance

Data protection

ISO 27001

Risk management

Internal audit

AI governance

Education

ISO 27001 Internal Auditor

CIPP/E or CIPM

Tools

Compliance software

Audit tools

Job description

Plentific is seeking an experienced compliance professional to lead day-to-day KYC, data protection and ISO 27001 governance across a growing real estate SaaS business.

You will own the compliance programme, run audits, review supplier terms, and guide teams on data processing and AI-related policy. Flexible working is available, with international opportunities and a broad impact on trust and risk management.