Exclusive: Head of Compliance Data Privacy Experience & Knowledge of ISO 27001, 9001 & 14001 Requir

Exclusive: Head of Compliance – Data Privacy Experience & Knowledge of ISO 27001, 9001 & 14001 Required

Ref: 4215G

£70K + Bonus & Bens Hybrid (1 day per week in office), London

Our client, a UK Technology Company, are looking for a Head of Compliance for a standalone role to oversee all UK Compliance. Reporting to the CEO you will perform appropriate compliance advisory and monitoring activities to ensure that the Company is compliant with all relevant regulations and obligations, duties will include:

1. Maintain ISO 27001, ISO 9001 and ISO 14001 certifications, including internal

audit programmes, hosting external audits, management reviews and the resolution of findings

1. Lead submissions and ongoing compliance for the Public Services Network (PSN), the Health and Social Care Network (HSCN) and the NHS Data Security and Protection Toolkit (DSPT)
2. Run the continual service improvement programme and bi-annual ITIL Assessment
3. Manage document control, review and publication process.
4. Manage the delivery of compliance training and required reading to all staff, including content updates and completion tracking
5. Contribute to the operational risk register, input opportunities, link to compliance objectives and map ISO requirements
6. Carry out due diligence on new and existing suppliers, agree mitigating actions with owners and support supply chain assurance for customers
7. Act as the company’s designated Data Protection Officer, advising the business on its obligations under UK data protection law, monitoring compliance, and acting as the point of contact for data subjects and the Regulator if required
8. Assist in conducting business impact analysis, creating business continuity & disaster recovery plans and the testing of key functions

The successful candidate must have at least 3 years experience of managing a compliance programme including ISO standards, with hands-on involvement in delivery. While a working knowledge of data protection law and experience managing a data protection programme is required, as important will be the ability to multi-task and interact with senior stake holders both internally and externally.

This is a close-knit office where you will work closely with colleagues at all levels in an open plan collegiate environment. The role is offered full time on a hybrid basis with at ideally 1 day per week in their London office although a fully remote UK based candidate with monthly visits to London may be considered.

If this sounds like your next career move and would like to know more, please email your CV to

Compliance Recruitment Solutions Limited (CRS) are acting as an employment agency in relation to this role.

The recruiter has stated that all applicants for this job should be able to prove that they are legally entitled to work in the UK. Through application, all candidates signify their acceptance of the above information and confirm that the information they provide is true and accurate to the best of their knowledge.