Compliance Manager

Job description

About us Plentific is pioneering real-time property operations for real-world impact. Our Software as a Service (SaaS) platform connects owners, operators, service providers and residents. We work with housing associations, local authorities, student housing, later living and build-to-rent operators, across a growing network of 1.7M+ properties and 5,000+ service providers worldwide, reaching 3M+ engaged residents. Our customers trust us with their residents’ data, their supply chains and their money. This role makes sure that trust is earned every day. Mission You'll run Plentific’s compliance programme day to day: KYC, data protection, ISO 27001, business risk and internal audit. You’ll make it practical, evidence-based and quick, using AI tools to do in hours what used to take days. What you’ll own KYC and due diligence Data protection ISO 27001 ISMS Business risk register Internal audit programme Compliance policies and training What you’ll do KYC and due diligence Run KYC checks on customers, suppliers and service providers: identity, ownership, sanctions, PEP and adverse media. Set risk-based rules for when enhanced due diligence applies, and escalate cases that need a decision. Keep KYC records complete and ready for audit or client review. Data protection Run day-to-day UK GDPR and Data Protection Act 2018 compliance: records of processing, DPIAs, retention and data subject requests. Review data processing agreements and supplier privacy terms with the legal team. Manage personal data incidents from first report to close, including the decision on whether to notify the ICO within 72 hours. Information security (ISO 27001) Maintain the ISMS with Information Security Team: Statement of Applicability, risk treatment plan, control owners and evidence, etc. Lead surveillance and recertification audits with our external certification body. Answer security and compliance questionnaires from housing association and local authority clients. Business risk and internal audit Own the business risk register. Work with risk owners to rate, treat and report risks to the General Counsel and leadership team. Plan and run an annual internal audit programme across information security, data protection and KYC, and track every finding to closure. Report on compliance status and open risks in a format leadership can act on. Policies, training and AI Keep compliance poli…