Head of Compliance

Job description

At Beam, we’re building AI that serves society. We're a global team of ambitious, hardworking problem solvers, applying fast-moving startup energy to work that makes the world a better place. If you want to apply your talent to the biggest problems society faces, Beam is the place for you. You’ll be part of a high-performance culture where you'll make a huge impact, rapidly progress your career, and truly enjoy your work. Over 100,000 frontline workers already use Beam to take notes, provide live interpretation and handle phone calls, so they can focus on the people who need them most. This is just the beginning. Our customers buy on trust - and this role owns it. As Head of Compliance, you'll run the operational heart of Beam's compliance function: a multi-certification portfolio, the privacy practice alongside Legal, and the customer-assurance front line with enterprise and public-sector buyers. This is a hands-on operator's role - on the audits, the processes, and the buyer conversations. You'll join Trust & Safety, reporting to our Chief Information Risk Officer (CIRO) on a deliberately flat team: a Junior Compliance Analyst and three incoming senior hires (Information Security Operations, Management Systems & Risk, and US Compliance Leads). You'll start as a senior individual contributor with a clear path to building and leading a team as we grow, and you'll act as the CIRO's deputy on compliance matters. What you'll do - Own Beam's certification portfolio end-to-end including ISO 27001, SOC 2 Type II, HIPAA, NHS DSPT, Cyber Essentials, GDPR and more, from planning and evidence to audit liaison and renewals. Three further ISO standards land March 2027; GovRAMP Core is underway in the US. - Run privacy operations: DSARs to deadline, DPIAs, the ROPA, Article 28 sub-processor governance, and breach assessment. - Lead customer assurance with enterprise and public-sector buyers (including the NHS), owning security questionnaires, due diligence, and defending Beam's positions in sales conversations. - Keep evidence continuously audit-ready in Drata, so audits are controlled, not a scramble. - Build the runbooks and cross-training that make the practice resilient. - Deputise for the CIRO on compliance decisions and escalations, setting the standard across Trust & Safety. What you'll need - Personal ownership of a multi-framework certification portfolio in B2B SaaS - ISO 27001 or SOC 2 minimum, ideally with Cyber Essentials and a health or public-sector framework (NHS DSPT, HIPAA). You've run audits, evidence, and renewals yourself, not in support. - Deep working UK GDPR knowledge you can apply without reaching for references - and the judgement to take a defensible customer-facing position fast and explain its legal basis. - A track record as a calm, credible assurance operator with enterprise and public-sector buyers, holding a proportionate line on out-of-scope demands without damaging the relationship. Nice to have - You lead without authority, coordinating work across peer specialists. - US public-sector exposure (GovRAMP/StateRAMP or US state privacy) to support handover to our incoming US Compliance Lead. - A health, social-care, or govtech background, with hands-on Drata (or similar) and customer trust portal experience. ABOUT BEAM Our team of 200+ embraces a hybrid working approach, enjoying 2-3 days of vibrant collaboration in our beautiful Shoreditch co-working space, fully equipped with rooftop views, an onsite barista and kitted out gym. We’ve picked up an armful of awards https://beam.org/awards for our work, including one from our former Queen. We've also been named by WIRED as one of London's 10 hottest startups https://www.wired.co.uk/article/london-hottest-startups-2021 and by LinkedIn as a Top 15 UK Startup https://www.linkedin.com/pulse/linkedin-top-startups-2022-15-uk-companies-rise-linkedin-news-uk/?trackingId=9TqxvkXTjF2HSPvSIWLczw%3D%3D. Meanwhile, we've been covered in the media literally thousands of times, including the likes of The FT, BBC, TechCrunch, Forbes and The Guardian https://beam.org/press. We’re also proud to be backed by some of the world's leading tech investors and entrepreneurs, including the founders of Booking.com http://Booking.com, Calm, Shazam and Dropbox. Start your journey to a more impactful career today. We're excited to hear from you. Reasonable adjustments: Beam is committed to fostering an inclusive, diverse, and supportive work environment for all employees. This policy extends to our hiring practices. We recognise that some candidates may need additional support during their hiring process to give them the best chance of being a success. To ensure that all candidates have an equitable opportunity during their process, we are committed to providing reasonable adjustments where required. If you require a reasonable adjustment to be made during your process, please let your Talent Partner know. We encourage you to share this information, but there is no obligation to do so. Please be reassured that any reasonable adjustment requests will not be taken into account when making a decision about your candidacy.