Compliance & Security Lead

Finance & Legal
· Remote or Hybrid UK
· Full Time
· Senior level

The role is the first dedicated owner of security compliance and data protection at a small developer tools company. A strong candidate has run SOC 2 audits hands on, knows UK and EU GDPR well enough to review DPAs, and can answer security questionnaires quickly and accurately. They also need enough technical grounding to discuss cloud infrastructure, access control and logging with engineers, and to write policies in plain language.

AI is part of the job itself: the posting expects AI and automation to speed up questionnaire drafting, evidence collection and policy review. The human side stays with judgment calls, such as deciding when new frameworks like ISO 27001 or ISO 42001 are needed, negotiating data terms, and keeping incident response ready. The role also supports a product that runs AI agents, so compliance has to keep pace with how that infrastructure works.

The work offers direct practice using AI tools for compliance tasks, from drafting questionnaire answers to reviewing evidence and policies. It also builds understanding of AI management standards, since ISO 42001 is named as a possible future framework. Candidates can prepare by getting comfortable with compliance automation platforms and by learning how AI agents are deployed and scaled in cloud environments.

• UK and EU GDPR
• DPA review and negotiation
• Plain policy writing

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

Open-source background jobs and durable workflow orchestration engine for long-running AI agents in Type Script, per the company.