SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: GBP 28,880 - 36,100 / annual
Certn is a background screening and trust platform that has raised $127M+ and earned Deloitte Fast 50 recognition three years running. The company is building the world's easiest background check to help people move faster into jobs, homes, and opportunities.
The Operational Compliance Specialist role translates legal and regulatory requirements into reliable, repeatable operational processes. This is a hands-on execution role supporting the company's privacy and EMEA compliance programs, working closely with the Senior Counsel, Privacy and Senior Compliance Officer.
Key Responsibilities:
Technical Privacy Compliance: Maintain the subprocessor register and manage the end-to-end process for reviewing, onboarding, and notifying clients of subprocessor changes. Administer data retention schedules by tracking retention periods across data categories and jurisdictions, coordinating deletion and archiving activities. Support access control compliance by maintaining records of data access permissions and assisting with periodic access reviews. Manage the data subject rights (DSAR) intake process—logging requests, coordinating fulfillment across teams, and ensuring regulatory response deadlines are met. Support the privacy office in monitoring, testing, audits, and documentation.
Client Privacy Communications: Serve as a first point of contact for client compliance queries on privacy and EMEA regulatory matters, escalating to leadership as appropriate. Prepare and issue subprocessor update notices and other privacy-related client communications. Maintain client-specific compliance records relating to data processing agreements.
EMEA Regulatory Operations: Track EMEA jurisdiction-specific reporting requirements and filing deadlines. Maintain the EMEA compliance calendar and assist with regulatory correspondence. Support credentialing and onboarding/offboarding compliance for EMEA clients and vendors. Apply working knowledge of UK disclosure regimes (DBS, Disclosure Scotland, AccessNI), including check levels and eligibility rules. Understand Certn's obligations as a registered body, umbrella body, or responsible organisation. Audit screening files for eligibility accuracy and procedural compliance. Prepare first-line responses to client and regulator inquiries. Apply data-protection rules for handling, retention, and secure destruction of criminal-record data under UK GDPR and the Data Protection Act 2018.
Operational Collaboration: Maintain process documentation for privacy and EMEA compliance workflows. Act as a liaison to Operations for privacy-adjacent process design and workflow improvements. Triage and manage Jira tickets relating to privacy and EMEA compliance.
Certn is a remote-first, high-performance company with a no-jerk policy. The culture emphasizes hustle, hunger, customer obsession, and continuous learning. The company is AI-enthusiastic and uses AI tools intentionally across all functions.
Requirements:
- Post-secondary education in a related field or equivalent combination of education and professional experience
- Practical working knowledge of GDPR and data subject rights processes, including experience engaging with regulatory or quasi-governmental bodies (ICO, privacy commissioner, or equivalent)
- Highly organized with exceptional attention to detail; ability to manage multiple priorities, deadlines, and regulatory requirements across different jurisdictions
- Excellent written and verbal communication skills
- Ability to maintain discretion and confidentiality
- Comfortable working across compliance, operations, and client-facing functions
- Professional privacy certification through IAPP (CIPT or CIPP/E) is a strong asset
- Comfortable using AI tools (e.g., Claude) to support day-to-day tasks such as drafting communications, summarizing regulatory guidance, and improving workflow efficiency
Note: The posting encourages applications from candidates who meet most, but not all, qualifications, recognizing that strong candidates come from diverse backgrounds.
