Information Security & Compliance Lead

Are you an experienced information security or compliance professional who believes compliance should enable a business rather than slow it down?

We are working with a fast-growing, well-invested B2B SaaS company specialising in business resilience and modern compliance across information security, data privacy and AI governance.

Their global platform is used by more than 65,000 people and helps organisations manage standards and regulations including ISO 27001, ISO 27701, ISO 42001, NIS2 and other increasingly complex governance requirements.

They are now looking for an Information Security & Compliance Lead to take ownership of their own internal compliance programme.

This isn't a traditional compliance role where the focus is simply on maintaining certifications, policing processes and ticking boxes.

You will be joining a company at the forefront of modern compliance, with the opportunity to show what simple, practical and commercially valuable governance can actually look like.

You will own the company's compliance posture across ISO 27001, ISO 27701, ISO 42001, Cyber Essentials and emerging standards, creating a best-practice implementation using the company's own SaaS platform.

The approach they take to compliance is important.

They want it to be light-touch, accessible and easy for people across the business to follow. Rather than acting as a gatekeeper, you will look at how good governance can make the organisation stronger, support customers and ultimately create commercial value.

You will:

• Own and continually improve the company's multi-framework compliance programme
• Lead internal and external audit cycles
• Maintain the risk register, Statement of Applicability and supporting compliance documentation
• Simplify internal governance processes and embed them into everyday ways of working
• Build a best-practice implementation across information security, privacy and AI governance
• Become one of the platform's most knowledgeable internal users
• Feed practical compliance experience directly back into the Product team
• Work with Customer Success and Professional Services to turn internal best practice into approaches customers can use
• Help demonstrate to customers and prospects what effective modern governance looks like
• Advise senior leadership on governance, risk and compliance
• Stay ahead of emerging standards and regulatory developments

There is also an opportunity to develop a genuine voice within the industry.

That could include getting involved in customer conversations, conferences, Linked In, podcasts, industry reports and other thought‑leadership activity, representing a business that works at the heart of information security, privacy and AI governance.

You don't need to already be an established industry speaker. What matters is that you're someone who enjoys talking about the subject and wants to get involved.

• Strong practical experience across information security, governance, risk and compliance
• Significant hands‑on experience with ISO 27001
• Experience managing a multi‑framework compliance environment
• Experience with at least one additional framework or standard such as ISO 27701, ISO 42001, SOC 2, Cyber Essentials, NIS2 or DORA
• Experience with in SaaS, technology or another relevant product‑led environment
• A track record of making compliance simpler and more accessible to non‑specialists
• A pragmatic approach to governance and an ability to avoid unnecessary process and bureaucracy
• Confidence engaging with senior stakeholders and teams outside compliance
• An understanding of how strong compliance and governance can create wider business and customer value
• Working knowledge of the UK and EU regulatory landscape

Experience…