Privacy and Compliance Analyst

Thompson Street Capital Partners; Greater London; Hybrid; GBP 50,000 - 80,000; Full time

Benefits offered by this job

Base salary

Salary reviews

Holiday entitlement

Bank holidays

Critical illness cover

Income protection

Private medical insurance

Pension scheme

Life assurance

Job summary

BCM One is seeking a Privacy and Compliance Analyst to join our global Legal team. You will help translate privacy obligations into practical policies, processes, and controls while collaborating with Legal, Information Security, IT, Product, and Engineering.

You will lead privacy reviews, support GDPR compliance, and contribute to risk assessments, data inventories, and privacy by design initiatives across the business. This hybrid London-based role offers growth in a global privacy program.

Qualifications

• 3+ years of experience in privacy, data protection, compliance, information governance, or GRC
• Experience with privacy assessments, documentation, supplier reviews, and customer questionnaires
• Understanding of cloud technology and information security principles, and frameworks such as ISO 27001 and SOC 2
• Strong research, critical thinking, and problem-solving skills
• Clear communication and ability to explain complex topics simply
• Organised, detail-oriented, and able to manage priorities across teams

Responsibilities

• Lead customer and supplier privacy reviews, questionnaires, and due diligence
• Conduct privacy and security due diligence on suppliers and third parties
• Support compliance with GDPR, UK GDPR, PECR, CCPA, CPRA, and other privacy laws
• Conduct DPIAs, TIAs, LIAs, and other privacy risk assessments
• Maintain and improve data inventories and privacy documentation
• Partner with Product, Engineering, IT, and business teams on privacy by design
• Support audits and compliance programs through evidence collection and remediation tracking
• Contribute to ISO 27001, SOC 2, and other compliance initiatives
• Support privacy incident investigations and remediation activities
• Monitor privacy laws and recommend policy or control improvements
• Collaborate with GRC Specialist on privacy awareness and training
• Identify ways to improve efficiency, strengthen processes, and reduce privacy risk

Skills

Privacy

Data protection

Compliance

GRC

Information governance

Cloud knowledge

ISO 27001

SOC 2

Research

Communication

Organization

Excel

Tools

Microsoft Office Suite

Excel

Job description

BCM One is looking for a Privacy and Compliance Analyst to join our global Legal team. This role will become a key privacy resource for BCM One globally. You will work closely with Legal, Information Security, IT, Product, Engineering, and other teams across the business to help turn privacy obligations into practical policies, processes and controls.

The Privacy and Compliance Analyst will have a strong focus on data privacy, customer and supplier questionnaires, privacy assessments, due diligence, and process improvement. You will also support wider Governance, Risk and Compliance activities, including audit preparation, evidence collection, and security compliance work.

This role offers the opportunity to develop real ownership. You will begin by learning about our business, reviewing existing policies and documentation while working alongside experienced colleagues. As your knowledge grows, you will be encouraged to recommend improvements and take greater responsibility for building and maintaining our privacy processes.

Work Locations:

Candidates willing to be hybrid and based out of our London office will be prioritized. Remote candidates within the UK will also be considered. This position must live and be authorized to work in the United Kingdom; it is not eligible for relocation or sponsorship.

Hours:

Core hours are typically 8:00/9:00 am to 17:00/18:00 with flexibility to support international team needs.

Travel:

Less than 5% annually, may include international trips.

What You Will Do:

• Lead customer and supplier privacy reviews, questionnaires, and due diligence
• Conduct privacy and security due diligence on suppliers and third parties
• Support compliance with GDPR, UK GDPR, PECR, CCPA, CPRA, and other privacy laws
• Conduct DPIAs, TIAs, LIAs, and other privacy risk assessments
• Maintain and improve ROPAs, data inventories, and privacy documentation
• Partner with Product, Engineering, IT, and business teams on privacy by design
• Support Legal on privacy notices, consent, data retention, and contractual commitments
• Support audits and compliance programs through evidence collection and remediation tracking
• Contribute to ISO 27001, SOC 2, and other compliance initiatives
• Support privacy, security, and third-party risk assessments and maintain risk registers
• Support privacy incident investigations and remediation activities
• Monitor privacy laws and recommend policy or control improvements
• Partner with our GRC Specialist to support privacy awareness and compliance training as needed
• Identify ways to improve efficiency, strengthen processes, and reduce privacy risk

What You Will Need:

• 3+ years of experience in privacy, data protection, compliance, information governance, or GRC
• Practical knowledge of GDPR, UK GDPR, PECR, and international privacy requirements
• Experience with privacy assessments, documentation, supplier reviews, and customer questionnaires
• Understanding of cloud technology, information security principles, and frameworks such as ISO 27001 and SOC 2
• Strong research, critical thinking, and problem-solving skills
• Clear communication skills with the ability to explain complex topics simply
• Organised, detail-oriented, and confident managing priorities across teams
• Familiarity with Microsoft Office Suite with proficiency in Excel

Who We Are:

BCM One is a leading telecom provider of NextGen Communications and Managed Services that has been in business for 30 years with more than 18,000 business customers and 5,000 channel partners who rely on our products, services, and teams to support their critical underlying network infrastructure. BCM One is the parent company to our family of brands that includes SIP.US, SIPTRUNK, Flowroute, SkySwitch, and Pure IP.

Joining the BCM One team is a chance to be part of a financially strong company with an exciting growth story; over the past 4 years we’ve brought together leading companies in our space who have built products, services, and programs to innovate and disrupt our industry. Now, operating under one roof, we are taking BCM One to the next level and looking for talented individuals to help make that happen.

Why BCM One:

We are committed to creating an environment that fosters accountability, innovation, and teamwork. Many BCM One employees have been with the company for 10+ years, which we think says a lot about our culture.

We Are a Team

• We pride ourselves on our team-based approach to providing quality solutions for our clients. BCM One encourages a culture of collaboration, exposing employees to different areas of the business and fostering career growth.
• We support employee involvement and provide opportunities to be responsible stewards via our BCM One Gives Back Program and our Emergency Fund to help our team members who are going through difficult times.

Hard Work is Recognized

• We offer an Employee of the Quarter program with a monetary award and Employee of the Year that includes a 7-day vacation package to the Caribbean. In addition, we host various regional team-building gatherings throughout the year.
• We believe in developing our team members and offer many opportunities for training, professional development and career growth.

Your Voice is Heard

• We empower our team members to speak up and look for opportunities in challenges.
• We have an Employee Council and a Diversity Equity and Inclusion Committee made up of volunteers from across the company who share a passion for making BCM One a great place to work and find ways to positively impact our communities.

How we take care of you:

• Competitive base salary
  
• Annual salary reviews
  
• Holiday entitlement (paid annual leave)
  
• Paid UK bank holidays
  
• Critical illness cover
  
• Income protection insurance
  
• Private medical insurance (PMI)
  
• Employer-matched NEST pension scheme
  
• Life assurance

BCM One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by applicable law.