About the role
You will make sure we meet our legal and regulatory duties: data protection, Ofcom rules for telecommunications, anti-bribery, and client and partner checks. You will run audits, manage compliance incidents and train our people.
What you will do
- Maintain our compliance framework and policies
- Run UK GDPR processes: records of processing, DPIAs, breaches and subject access requests
- Carry out client and partner checks (KYC) and fraud controls
- Track Ofcom and telecommunications requirements
- Lead audits and manage compliance incidents
- Train staff and advise leadership on risk
Minimum qualifications
- Bachelor's degree in Law, Business or a related field, or equivalent practical experience
- 5+ years in compliance or data protection in a regulated sector
- Current CIPP/E or BCS Practitioner Certificate in Data Protection
- UK GDPR processes run end to end (RoPA, DPIAs, breaches, subject access requests)
- KYC and anti-fraud checks
- ISO 27001 internal audit
- English at CEFR C1 or above (IELTS 7.0 or equivalent)
Expert knowledge
- UK GDPR in depth: lawful bases, DPIAs, international transfers (IDTA) and breach reporting
- KYC and customer due diligence, sanctions screening and fraud controls
- Ofcom General Conditions and telecommunications compliance
- Running internal audits and tracking corrective actions to ISO 27001
Preferred qualifications
- Ofcom General Conditions
- ICA Diploma in Governance, Risk and Compliance
- ISO 27001 Lead Auditor
- Telecommunications sector
Before any offer we verify your certificates, qualifications, references and right to work in the UK. Security roles also need background screening (BPSS) and may need security clearance.
SOWTK is an equal opportunity employer. We welcome applicants of every background and do not discriminate on any characteristic protected by the Equality Act 2010.