Compliance Project Manager

Staysure Group; Northampton; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Training opportunities

Development opportunities

Great benefits

Job summary

Staysure Group is seeking a Project Manager (Compliance) to lead end-to-end security and regulatory transformation initiatives. Reporting to the Head of Delivery, you’ll collaborate with trading stakeholders to design, develop, and implement compliant projects across UK and EU regimes.

You’ll translate regulatory needs into practical programs, driving them from idea through discovery, design and delivery. Ideal candidates have extensive experience with GDPR, Consumer Duty, FCA, PCI-DSS, and

Qualifications

• Extensive experience in UK/EU compliance and regulatory agendas.
• Strong stakeholder management skills.
• Experience leading security and compliance projects.
• Professional certifications such as CIPP/E, CISSP, CISA, or PRINCE2 (preferred).

Responsibilities

• Lead end-to-end management of security and compliance projects, aligning with regulatory requirements and risk frameworks.
• Develop and manage a security and compliance transformation roadmap with on-time delivery.
• Embed security, data protection, and compliance within transformation initiatives across the business.
• Collaborate with legal, risk, IT security, and operations teams to ensure regulatory adherence.

Job description

Work Life Balance

Hybrid, occasional travel to Northampton when required

Candidate Journey

Our goal is to reply to applications within 3 working days. Additionally, we make sure to acknowledge, evaluate, and respond to all applications as a way of showing our appreciation for your time and effort in applying to us.

Interview Process

Initial recruiter call, first stage then final stage

Summary of Role

The Project Manager (Compliance) role is responsible for leading the end-to-end delivery of security and compliance transformation initiatives across the Staysure Group. Reporting to the Head of Delivery, this role works closely with key trading stakeholders to ensure the successful design, development, and implementation of regulatory, security, and compliance-driven projects.

This role requires a delivery-focused approach to compliance priorities, turning hypotheses into structured initiatives and managing them through idea, discovery, design, and delivery. Moreover, this role requires extensive experience in UK, EU, and compliance and regulatory agendas, including but not limited to:

• GDPR (General Data Protection Regulation)
• Consumer Duty
• FCA & GFSC regulations
• PCI-DSS (Payment Card Industry Data Security Standard)
• Operational Resilience & Business Continuity
• Third-Party Risk Management
• Other key security & compliance frameworks

Security & Compliance Portfolio Delivery

• Lead the end-to-end management of security and compliance projects, ensuring initiatives align with regulatory requirements, business objectives, and risk frameworks.
• Develop and manage a security and compliance transformation roadmap, identifying priorities and ensuring projects are delivered on time and to regulatory standards.
• Ensure that security, data protection, and compliance frameworks are fully embedded within transformation initiatives across the business.
• Collaborate with legal, risk, IT security, and operational teams to ensure compliance with UK & EU regulations.

Regulatory & Security Compliance

• Provide subject matter expertise in regulatory compliance and risk management, supporting teams to implement best-in-class security and compliance practices.
• Work with stakeholders to identify gaps in compliance and develop remediation plans to address regulatory risks.
• Ensure GDPR, Consumer Duty, PCI-DSS, GFSC and FCA compliance are considered at every stage of product, platform, and service development.
• Oversee third-party compliance management, ensuring partners and vendors align with regulatory and security standards.

Project & Stakeholder Management

• Engage with senior business leaders and regulatory bodies to provide updates on compliance initiatives and project progress.
• Act as the key point of contact for security and compliance project delivery, ensuring clear communication, governance, and risk management.
• Work cross-functionally with technology, legal, risk, finance, and operational teams to ensure seamless integration of compliance measures.
• Establish and monitor key compliance metrics, ensuring continuous improvement in regulatory adherence and security measures.

Operational Resilience & Risk Mitigation

• Lead projects that enhance the resilience of business operations, ensuring the Group meets FCA Operational Resilience & Business Continuity requirements.
• Identify potential security threats and compliance risks, developing proactive strategies to mitigate business exposure.
• Support the business in achieving and maintaining key security certifications and regulatory approvals.
• Extensive experience in security, compliance, and regulatory project management, preferably within the financial services or insurance sector.
• Strong understanding of UK & EU compliance regulations, including GDPR, Consumer Duty, GFSC, FCA, PCI-DSS, and Operational Resilience.
• Proven ability to translate regulatory requirements into practical, scalable business initiatives.
• Experience leading complex, cross-functional security and compliance projects, from discovery to delivery.
• Strong stakeholder management skills, with the ability to engage and influence senior executives, regulators, and third-party partners.
• Knowledge of risk management, data protection, and cyber security frameworks.
• Familiarity with third-party compliance and supplier risk management.
• Excellent project management, governance, and reporting skills.
• Professional certifications such as CIPP/E (Certified Information Privacy Professional – Europe), CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), or PRINCE2.
• Experience with ISO 27001, NIST, or other security frameworks.
• Knowledge of AI and automation in compliance processes.
• Experience in agile delivery and product-led transformation approaches.

We’re assembling a diverse team, where skills, not checkboxes, reign supreme, regardless of race, religion, sex, sexual orientation, gender identity or disability.

Staysure Group welcomes all new starters with open arms, providing training, development opportunities, and great benefits.