Compliance Manager leading information security and compliance at Sona, an AI-native workforce management company. Own and evolve security and compliance systems across the UK and US.
Responsibilities
Own and lead information security across the business, including policies, controls and risk management
Lead external certifications and audits (e.g. ISO 27001, GDPR, SOC 2, Cyber Essentials)
Work cross-functionally to advise teams on risk and data security, supporting them with use of new tools and AI adoption
Translate security and compliance requirements into concrete systems, tools and processes
Own or lead implementation of technical controls (e.g. access management, logging, monitoring, incident response, device management)
Act as the point of contact for RFPs, customer security reviews, questionnaires and audits
Support and develop AML compliance, extending depth over time where needed
Proactively identify and implement AI-driven improvements to compliance workflows, tooling and processes
Requirements
5+ years' experience in information security, compliance or closely related roles
Hands-on experience leading or materially contributing to external certifications (e.g. ISO 27001, GDPR, SOC 2, Cyber Essentials)
Experience in a SaaS or technology environment, ideally a startup or scale-up
Strong understanding of security controls and how to implement them in practice (not just on paper)
Experience working directly with tools, vendors and configurations (not purely advisory)
A pragmatic, risk-based mindset with the ability to push back clearly and constructively
A genuine enthusiasm for AI — demonstrable examples of using AI tools to improve how you work, whether professionally or personally
Comfortable working in a hybrid model: 2-3 days per week in our London Soho office
Benefits
Salary: £75,000-£85,000
Share options
35 days annual leave (25 days standard plus 10 flexible public holiday days)
Extra day of leave for every year of service
Pension contributions matched up to 5%
Comprehensive health insurance
Enhanced parental leave & pay
Co-working space stipend for those based outside London
Annual all expenses paid team retreats
The latest Macbook and equipment budget for your home office
Senior Regulatory Analyst handling regulatory relationships and compliance for energy transmission at ISA ENERGIA BRASIL. Managing contracts and regulatory submissions to support their energy transition efforts.
Data Strategist focusing on regulatory compliance working across information systems. Collaborating with various departments and leading workshops to optimize processes.
TMS Compliance Lead Analyst conducting Transaction Monitoring investigations within Coinbase compliance team. Ensuring adherence to AML requirements and documenting investigative outcomes.
HSE & Quality Compliance Specialist at Blue Spark supporting compliance with health, safety, environmental, and quality standards. Leading QHSE programs and ensuring regulatory adherence.
Head of MLRO providing compliance advice and oversight in a fintech company. Managing AML functions and developing regulatory compliance roadmaps for EveryPay in Greece.
IT Compliance Analyst at Rentokil Initial responsible for compliance activities and collaborating with IT teams. Track compliance, identify gaps, and improve processes as needed.
Compliance Officer ensuring company's compliance with legal regulations in a financial institution. Collaborating with legal teams and supervising internal compliance standards.
Senior Associate role at PwC focused on compliance and risk management for clients. Responsibilities include due diligence, documentation, and effective client communication.
Compliance Manager at Rabobank, overseeing compliance frameworks and guiding business units in financial services. Strong focus on regulatory adherence and risk management practices.
Quality and Compliance Monitoring Manager overseeing safety management systems and quality assurance at Liebherr Aerospace in Dubai. Leading continuous improvement of safety practices and regulatory compliance efforts.