Compliance & IT Operations Manager

Reports To: Chief Financial Officer

Job Level: Senior Individual Contributor

Location: London, UK

Role Type: Full-Time, Permanent

Salary: Up to £65,000 D.O.E

Role Purpose

As Lunio’s Compliance & IT Operations Manager, you will own the day-to-day management and continuous improvement of our compliance programme, information security governance and IT operations. You will lead our approach to ISO 27001, SOC 2 and UK GDPR/data protection, acting as the primary point of contact for our external Data Protection Officer (DPO), auditors, customers and internal stakeholders on security and compliance matters. Alongside this, you will oversee our day-to-day IT operations, including identity and access management, equipment and software lifecycle, user onboarding and offboarding, and internal IT support. This is a highly autonomous role with significant ownership, bringing compliance, information security governance and IT operations together under a single accountable owner.

Key Responsibilities

You'll make a great Compliance and IT Operations Manager at Lunio if you have experience with:

• Compliance Programme Ownership: Manage and continuously improve Lunio's compliance programme (ISO 27001, SOC 2, UK GDPR), acting as the single point of contact for auditors, our external DPO, and internal stakeholders.
• Audit Readiness: Lead certification and audit cycles end-to-end, including scoping, evidence collection, auditor liaison, and remediation of findings.
• Policy & Risk Management: Maintain and evolve Lunio’s information security and data protection policy suite, ensuring policies remain current, approved, and understood across the business. Own the corporate risk register, conducting regular risk assessments and driving mitigations through to closure.
• Third-Party & Customer Assurance: Manage security and compliance due diligence across both suppliers and customers, including vendor and sub-processor risk assessments and completion of customer and prospect security questionnaires, partnering closely with Sales and Customer Success.
• Security Incident Management & Resilience: Own security incident and data breach response processes, coordinating with the DPO and SLT where required. Lead business continuity and disaster recovery planning, including maintaining plans and coordinating periodic testing.
• Security Awareness & Training: Build a strong culture of security and compliance across Lunio by designing and delivering company-wide awareness training, onboarding, and ongoing guidance.
• IT Operations & Access Management: Oversee day-to-day IT operations, including equipment provisioning, software licensing, identity and access management, and employee joiner, mover and leaver processes, ensuring appropriate access controls and least-privilege principles are consistently applied.
• IT Support & Enablement: Provide effective internal IT support, resolving day-to-day issues and escalating more complex cases where necessary. Own technology setup for new starters and maintain clear processes, documentation, and runbooks to support consistent IT operations.