OneClickComply is changing how businesses think about cybersecurity compliance. We've built a platform that automates the hard parts, technical control implementation, policy generation, continuous monitoring, and real-time audit evidence, so that achieving certifications like ISO 27001, SOC 2, Cyber Essentials, and CIS v8 takes weeks instead of months. We work with a growing network of audit partners and serve clients across every industry who need to prove they take security seriously.
We're a small, fast-moving team where your ideas don't get lost in layers of hierarchy. If you've ever been frustrated by how unnecessarily painful compliance can be, you'll understand exactly why we exist.
This role puts you right at the heart of what we do. You'll be the compliance brain behind our client relationships, the person our customers trust to get them through their audits with confidence, and the expert whose real-world knowledge makes our platform better every day.
You'll work directly with clients preparing for certification, run readiness assessments, advise on their ISMS, risk registers and policy documentation, and be the calm, knowledgeable voice that turns audit anxiety into a clear plan of action. You'll also be the key link between our clients and our audit partners, making sure everyone has what they need and nothing falls through the cracks.
This isn't a back-office role buried in spreadsheets. You'll have genuine influence over the product, the client experience, and the direction of our compliance advisory function as we scale.
Guiding clients through their compliance journey. You'll run readiness assessments, identify gaps in controls, policies, and documentation, and walk clients step by step through the audit lifecycle, from initial scoping all the way through to surveillance and recertification. You'll review Statements of Applicability, risk registers, and platform-generated policies to make sure everything holds up under auditor scrutiny.
Being the bridge to our audit partners. You'll coordinate with our certified audit partners, manage scheduling and evidence provision, handle queries during assessments, and make sure findings and non-conformities are communicated back to clients in a way that's clear and actionable. You'll also help onboard new audit partners into the OneClickComply environment.
Shaping the platform itself. Your expertise will directly feed into how we map frameworks like ISO 27001, SOC 2, Cyber Essentials, CIS v8, and GDPR to our technical control library. You'll review and refine auto-generated content, flag where control mappings need improving, and work alongside our product and engineering teams to make the platform smarter based on what you're seeing in the field.
Sharing what you know. You'll create client-facing guidance, best-practice materials, and webinars. You'll keep the team sharp on evolving standards and regulatory changes. You'll help build internal knowledge so that everyone at OneClickComply can speak confidently about compliance.
You'll have at least 3 to 5 years of hands-on experience in compliance consulting, internal auditing, or GRC advisory, ideally in cybersecurity or information security. You'll have worked directly with frameworks like ISO 27001, SOC 2, Cyber Essentials / CE Plus, NIST, or CIS Controls, and you'll have real experience either conducting audits or preparing organisations to pass them.
You don't need to be a penetration tester, but you should be comfortable talking about firewall rules, access controls, encryption, and cloud configuration with both technical teams and board-level stakeholders. You're someone who can take a complex regulatory requirement and turn it into plain, practical advice.
Certifications like ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, or CCEP are a strong plus. So is experience with GRC platforms or compliance automation tools, and any background in SaaS or RegTech will help you hit the ground running.
You'll be joining at a stage where you can genuinely shape how our compliance advisory function works. Your audit expertise won't just help clients, it will directly influence how the product evolves. There's no red tape, no death by committee. Just a team that cares about making compliance less painful for everyone.
We've put together a benefits package that we think goes well beyond what you'd expect from a company our size:
Your health and wellbeing come first. You and your family get 24/7 access to GP appointments and prescriptions, unlimited telephone, face-to-face, and video counselling, virtual physiotherapy, and unlimited eye testing. You'll also have access to virtual gym classes and discounted memberships at over 3,600 locations including PureGym, David Lloyd, Nuffield Health, and more. We offer subsidised health insurance through BHSF starting from just \u00a36.21 a month, plus dedicated care and special needs support if you need it. And yes, your pets are covered too, with 25% off 24/7 video vet consultations through Vetster.
Generous time off. 25 days paid annual leave plus 8 bank holidays (33 days total), 10 days company sick leave, a paid day off on your birthday, paid pet bereavement leave, and a half day off for your child's first day at school. We also offer additional discretionary leave when life requires flexibility.
Real financial perks. You'll be part of our stocks and share options pool (10% of the company), with your allocation based on seniority and impact. On top of that, you'll get over 4,000 retail discounts, 40% off cinema tickets, free 24/7 legal advice from Irwin Mitchell, personal finance and debt advice through Auriga, entry to our monthly \u00a31,000 lottery, charity fundraising matching up to \u00a3250, up to \u00a3250 towards driving lessons after your first year, and access to interest-free loans for travel passes and crisis support.
The day-to-day extras. Unlimited free tea, coffee, soft drinks, and alcoholic beverages in the office, plus a monthly team meal at a restaurant voted on by the team, fully on us.
