Compliance Manager - Part Time

Amplience Ltd.; United Kingdom; Remote; GBP 40,000 - 60,000; Part time

Job summary

A tech-driven company is seeking a part-time Compliance Manager to lead governance, risk and compliance efforts. The role involves maintaining SOC2 and ISO certifications, overseeing compliance with data protection laws, and implementing effective policies across the business. The ideal candidate should have proven experience in GRC programs and strong communication skills. This flexible remote position allows for three workdays per week.

Benefits

Pension Scheme

25 days paid holiday

Enhanced Maternity and Paternity Leave

Birthday Leave

Employee Referral Bonus

Qualifications

• Proven experience managing governance, risk and compliance (GRC) programs in a technology-led business.
• Experience leading successful audits or certification processes.
• Comfortable working independently and drafting policies.

Responsibilities

• Maintain SOC2 Type II certification and ensure compliance with evolving requirements.
• Lead implementation roadmap for ISO27001 and ISO42001.
• Oversee compliance with UK & EU GDPR laws.

Skills

Governance, Risk and Compliance (GRC)

SOC2 and ISO27001 knowledge

Data protection regulations knowledge

Experience with compliance automation tools

Strong communication skills

Tools

Vanta

Drata

SureCloud

Job description

Compliance Manager - Part Time

Department: Platform

Employment Type: Part Time

Location: Remote, UK

Description

What to Expect

As the Compliance Manager, you’ll lead our governance, risk and compliance efforts - working cross-functionally to maintain and strengthen our security certifications. You’ll take ownership of key frameworks like SOC2 and ISO, as well as GDPR and related privacy requirements. This is a hands‑on, flexible, and fully remote part‑time role (3 days per week negotiable).

Key Responsibilities

• Maintain SOC2 Type II certification, ensuring ongoing compliance with evolving controls and requirements.
• Develop and lead the implementation roadmap for ISO27001 and ISO42001, from gap analysis to successful certification.
• Define, update and enforce security, data protection, and compliance policies across the business.
• Work directly with teams to design and embed practical, scalable controls aligned to business processes.
• Oversee compliance with data protection laws, including UK & EU GDPR and relevant US privacy frameworks (e.g., CCPA).
• Support the review and negotiation of Data Processing Agreements (DPAs) within customer legal contracts.
• Track and manage evidence collection, audits, and corrective actions using GRC platforms such as Vanta, Drata or SureCloud.
• Monitor compliance risks, escalating issues and advising on remediation strategies.
• Lead vendor risk assessments and ensure third‑party compliance obligations are met.
• Own internal audit processes, documentation, and cross‑functional training to support a culture of continuous compliance.

What You'll Bring (Skills, Experience & Mindset)

• Proven experience managing governance, risk and compliance (GRC) programs in a technology‑led business.
• Deep understanding of SOC2 and ISO27001; experience leading successful audits or certification processes.
• Strong knowledge of data protection regulations, including UK/EU GDPR and US equivalents (e.g., CCPA).
• Experience reviewing and supporting legal contract terms, particularly Data Processing Agreements (DPAs).
• Comfortable working independently and hands‑on - drafting policies, interpreting frameworks, and engaging directly with teams.
• Experience with compliance automation tools (e.g., Vanta, Drata, SureCloud).
• Clear, confident communicator who builds strong working relationships across technical and non‑technical teams.
• Organised, detail‑oriented and pragmatic - able to balance compliance requirements with business realities.
• Flexible mindset; thrives in part‑time and asynchronous work environments.

Benefits

Pension Scheme

• Auto‑enrolled after 3 months' service
• Salary sacrifice scheme to maximise tax efficiency
• 5% employee contribution, matched by 5% from Amplience
• Pension broker: Titan Group (offers financial advice)
• Pension provider: Aegon

Annual Leave

25 days paid holiday as standard pro rata

Length of Service Entitlement

UK Team Entitlement 3+ years continuous service | 26 days annual leave entitlement 4+ years continuous service | 27 days annual leave entitlement 5+ years continuous service | 28 days annual leave entitlement 6+ years continuous service | 29 days annual leave entitlement 7+ years continuous service | 30 days annual leave entitlement

Enhanced Maternity Leave

• 12 weeks full pay
• 12 weeks at 50% pay
• 15 weeks at statutory maternity pay (SMP)
• 13 weeks unpaid

Enhanced Paternity Leave

• 2 weeks full pay

Sick Pay

• Up to one month’s full pay per calendar year (at company discretion, with medical certificate)

Study Leave

• 5 days for employees on accredited long‑term courses (12+ months)

Birthday Leave

• One paid day off during your birthday month

Company‑Wide Recharge Days

• One day off per quarter for the whole business – rest, recharge, and reset

All roles are laptop‑enabled

Working arrangements agreed with your line manager

Freedom Fridays: Finish early on Fridays to support work‑life balance (full‑time employees only)

Holiday Buy Scheme

• Purchase up to 5 extra days per year, repaid through salary deductions

Cycle to Work Scheme

• Save on bikes & accessories via tax‑efficient payments (Blackhawk Network)

Tech Scheme

• Purchase tech items and spread the cost over 12 months via salary deduction (Blackhawk Network)

Season Ticket Loan

• Advance loans available for travel tickets, repaid via payroll

Charity/Volunteer Days

• Up to 3 paid days a year for volunteering or charity work

Payroll Giving (CAF – Give As You Earn)

• Tax‑free donations to UK charities, directly from your salary

Eyecare

• Reimbursement for a standard eye exam every two years

Employee Referral Bonus

• £1,200 / €1,400 / $1,500
• 50% paid at 4 months, 50% at 7 months post‑hire

Fraud

Fraudsters are always looking to take advantage of people searching for a job online. In part, this is because job listings are the ideal place to exploit a job seekers vulnerability. Job scams come in lots of different shapes and sizes, but they most commonly involve scammers posting adverts or contacting people out of the blue about unrealistic job opportunities. Amplience takes the security and safety of your personal data very seriously. In terms of career opportunities and vacancies, we will only use: https://www.amplience.com/careers/ https://careers.amplience.com/. Amplience will never use third‑party messaging services such as Telegram, WhatsApp, Messenger, Snapchat, WeChat, etc. to communicate with you. If you are using any other website or messaging application, even if it looks like Amplience, then it will likely be fraudulent. In which case, please notify us at: [e-mail].