Senior Compliance Lead — SOC 2 & ISO 27001 (Remote UK)

EnergySys Limited; Greater London; Hybrid; GBP 40,500 - 49,500; Full time

Benefits offered by this job

Unlimited holiday

Private medical insurance

Company matches 8% of salary

Enhanced parental leave

ISO 27001 Lead Implementer funded

Direct access to Head of Operations &

Real ownership of compliance programme

Job summary

EnergySys is seeking a dedicated Compliance & Governance professional to own the SOC 2 Type II and ISO 27001 audits, maintain the ISMS, and drive regulatory compliance across UK, Australia, and US entities. You will configure Drata, map controls, and report to senior leadership while partnering with the CEO and Head of Operations.

The role requires hands‑on audit experience, cloud familiarity (AWS, Entra ID), strong policy writing, and autonomy to lead the programme with minimal supervision.

Qualifications

• Hands-on SOC 2 and ISO 27001 experience with audit liaison.
• Experience with GRC platforms (Drata, Vanta or similar).
• Cloud literacy with AWS and Entra ID.
• Strong written communication; drafting policies and reports.

Responsibilities

• Own SOC 2 Type II and ISO 27001 audit lifecycle including surveillance and recertification planning.
• Administer Drata framework configuration and evidence collection.
• Chair Governance, Risk and Compliance Committee; report to leadership and board.
• Maintain policy register and advise on regulatory updates.
• Conduct vendor risk assessments and review third‑party certifications.
• Pull evidence from AWS, Entra ID, Intune, GitHub; support governance perspective.
• Administer cybersecurity awareness training and support GDPR/compliance across entities.

Skills

SOC 2

ISO 27001

GRC platform

AWS

Entra ID

Written communication

AI tools

Ownership

Tools

Drata

Rippling LMS

Vanta

Job description

EnergySys is seeking a dedicated Compliance & Governance professional to own the SOC 2 Type II and ISO 27001 audits, maintain the ISMS, and drive regulatory compliance across UK, Australia, and US entities. You will configure Drata, map controls, and report to senior leadership while partnering with the CEO and Head of Operations.

The role requires hands‑on audit experience, cloud familiarity (AWS, Entra ID), strong policy writing, and autonomy to lead the programme with minimal supervision.