Head of Compliance at Fresha

📋 Description

• Own end-to-end compliance across HIPAA, ISO27001, PCI DSS, GDPR, SOC 2.
• Drive automation and AI to scale compliance operations.
• Lead external audits: scoping, evidence, findings.
• Oversee access reviews, vulnerability management, and risk register.
• Expand data protection, vendor risk, and policy programs.

🎯 Requirements

• Experience leading PCI DSS and GDPR programs (ISO27001/HIPAA helpful).
• Hands-on with Sprinto; policy drafting and vendor reviews.
• Able to bridge engineers and auditors; strong communication.
• Proficient with automation/AI tools; scripting and workflows.
• Bonus: GRC tooling experience beyond Sprinto; reduce manual work.

🎁 Benefits

• London office five days/week; dog-friendly.
• Inclusive culture with fair consideration for all.
• Collaborative, cross-functional teams across Security, IT, Legal, Eng.
• Opportunity to drive automation in a high-impact role.