Technical Compliance Lead

PolyAI builds enterprise voice assistants that carry on natural conversations with customers to solve their problems. Our voice assistants understand customers, regardless of what they say or how they say it. We serve enterprises where customer conversation is an important part of doing business. Our customers include some of the leading names in banking, hospitality, insurance, retail, and telecommunications.
Our enterprise clients deploy PolyAI voice assistants to cut down on wait times and free up live staff to focus on calls requiring empathy and judgment. As a result, our enterprise clients see improved customer satisfaction, employee retention and operational efficiency.

We are looking for a passionate, motivated, process oriented person to join our Compliance team in a fast growing AI company. You will be working alongside the IT, DevSecOps and Compliance teams. Your main responsibility will be to enforce Compliance and Security processes across the company, supporting the Engineering team and contributing to the further development of a robust and compliant Security posture at PolyAI.

• 3-5 years experience in a technical role at a company with heavy Compliance requirements
• Knowledge and experience maintaining a high level of security in AWS or other cloud environments
• Experience of compliance certification audits, like ISO27001, SOC-2 Type 2 and PCI-DSS
• Working with technical teams (Development and Product) in a security-focused role
• Previous experience with vulnerability management tools and patching
• Secure Coding knowledge is preferred
• Excellent written and verbal communication skills.
• Experience in the use and administration of a Cloud Security platform
• Providing guidance to the Engineering team around Compliance and Security requirements for projects and change management
• Keeping our Production environment secure, working with the DevSecOps team, ensure our client data is safely processed and stored
• Patch and security vulnerability remediation. Working on a Cloud security platform to identify and secure all vulnerabilities and weaknesses in our Production environment
• Helping us develop our processes by contributing to the writing and revision of technical documentation, Cloud Security, and Compliance policies and Operating Procedures.
• Working with the IT team to review and implement security measures to keep our IT assets secure
• Assisting with client security questionnaires and queries
• Working as an integral part of our internal Compliance team for audits and internal processes/reviews
• Ensuring high availability and resilience of our platform via planning and testing (DR, BCP, backup testing)

What will you be working with:

• AWS
• GCP
• Azure
• GitHub
• Cloud Security platform such as Orca or Wiz
• Vanta or other Compliance management platform
• Intruder.io
• Tenable

💰 Participation in the company’s employee share options plan

🏝 25 days holiday, plus bank holidays

🏡 Flexible working from home policy plus a one-off WFH allowance when you join

🌎 Work from outside of the UK for up to 6 months each year

🧡 Enhanced parental leave

📚 Yearly learning budget

🚲 Bike2Work scheme

📚 Annual learning and development allowance

🏡 One-off WFH allowance when you join

👨‍👩‍👧 Company-funded fertility and family-forming programmes

🌸 Menopause care programme with Maven

🏥 Private healthcare and dental cover, discounts on gym members and relaxation apps, and access to a range of mental health programs

Equal Opportunity Statement:

PolyAI is proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

All employment decisions at PolyAI will be based on the business needs without attention to ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, neurodiversity status or disability status.