Operations Manager (Data Protection & InfoSec)

We're a rapidly growing startup seeking an Operations Manager, with a specific focus on compliance, covering data privacy and information security. This role involves liaising with our external consultants, alongside supporting on general startup operations, covering legal, finance and HR. As a small but growing team, this position has significant potential for progression.

What we do

At gocertify, we revolutionise how brands run their offers & loyalty programmes. In just over 3 years we’ve partnered with 350+ retailers including the likes of FARFETCH, Currys, Samsung, HelloFresh and the H&M group. We are continuing to grow quickly, driving over £5m in retailer sales every month - we’ve achieved this without external investment (we’re fully bootstrapped and profitable).

We currently have 2 industry-disrupting products:

1. Closed group offer verification - enables retailers to engage important segments like students, key workers, and specific age groups with exclusive discounts. Leveraging AI, we ensure instant and accurate verification. Check out the first Google result for “FARFETCH NHS discount” to see an example.
2. White-label offer pages - help retailers convert more shoppers that google for discounts by creating a seamless, brand-owned discount page, diverting traffic from 3rd party websites. Check out the first Google result for “Currys discount code” to see an example.

Underpinning both is the ability for brands to collect zero-party data. As data becomes the most valuable resource, gocertify is at the forefront of driving the shift toward retailer-owned shopper data. This shift is making us more and more appealing to the world's biggest brands.

Working at gocertify

We’re a team of 14, working remotely, but with access to coworking spaces in London where we optionally meet up. We bring the whole team together for socials and team coworking days too.

We work hard, have fun and treat each other with respect and kindness. We’re always working to improve our approach to diversity, equity and inclusion (D,E & I) and know that difference will help us succeed as colleagues and as a company.

About the role

• Data protection and InfoSec (60-70%)/general startup operations - supporting on finance, legal, HR (30-40%).
• Coordinate with external consultants specialising in data protection and information security, serving as the key liaison between these experts and our internal team.
• Project manage and directly work on implementing the security protocols, policies and privacy strategies, ensuring they align with our internal objectives and compliance requirements, particularly as we will look to achieve ISO27001 certification.
• Work on the due diligence process with our largest enterprise clients, to ensure we meet all compliance requirements. You’ll be going between our commercial teams, consultants and the client.
• Act as the primary point of contact for all matters related to information security and data protection, bridging the gap between external advisors and our team - whether it’s commercial, product or legal queries.
• Dedicate 30-40% of your role to broader startup operations, such as planning and executing team events, supporting our finance team, working on initiatives in Diversity, Equity, and Inclusion (DE&I) and culture to foster an inclusive remote work environment.
• We welcome you to apply, even if you don't feel you meet 100% of our criteria.

Requirements

• Basic knowledge of cybersecurity principles, data privacy laws, like GDPR and international standards, such as ISO27001 - note you’ll be working with specialist consultants, so you don’t need to have advanced knowledge, more an awareness and curiosity to learn.
• Experience in a technology product business, especially in the data protection/security aspects.
• Ability to assess risks and interpret complex information.
• Proven project management skills, including coordinating with various parties - both internal and external.
• Experience in handling broader operations tasks, such as recruitment, onboarding, and employee engagement.
• Commitment to and experience in promoting Diversity, Equity, and Inclusion (DE&I) in the workplace.
• Excellent communication skills (both written and verbal) in English.
• Ability to build and maintain professional relationships with consultants, team members, and external partners.
• Adaptability in a fast-paced startup environment and strong problem-solving skills.
• Location: UK based, working remotely from home. You’ll be required to attend some meetings and events in London at least once a month.
• Visa sponsorship is not possible for this role. You must have the right to work in the UK without visa sponsorship for this role.

Benefits

• Salary - £37,500 - £40,000
• Meaningful EMI share options
• 25 days annual leave + UK bank holidays
• Private health insurance with AVIVA (including optical and dental cashback and the option to self-fund partners/dependents)
• Enhanced sick pay
• Work-from-home budget
• Macbook or equivalent laptop
• Pension with NEST
• Flexible remote work in any country around our core hours (10am-4pm UK)
• Unlimited access to coworking spaces in 48+ countries through Hubble
• Access to incredible gocertify offers + Perks at Work account