Risk & Compliance Manager (Hybrid)

Our client is looking for a Risk & Compliance Manager to lead and manage their day-to-day regulatory and compliance requirements as a CLC-regulated, AI-native conveyancing law firm. You'll report to the COO and Head of Legal Practice, and work closely with our MLRO, conveyancers, legal and AI engineers.

This is an early, high-impact role for someone hungry to make their mark. You'll help set the compliance standard for an AI-native law firm from the ground up, with real ownership and the freedom to shape how it's done. If you've ever wanted to show that compliance can be an engine for growth rather than a brake, this is your chance.

The Role:

Regulatory management: Be the first point of contact for regulatory questions, giving pragmatic, commercial guidance that supports innovation while safeguarding standards. Track regulatory change, prepare CLC returns and inspection material, and act as the ongoing competence reporting officer.
AML: Maintain the firm-wide risk assessment, AML policy and due diligence standards, including source of funds, PEPs, sanctions and seller identity fraud.
Suspicious activity: Evaluate internal suspicion reports and high-risk escalations. Prepare SARs and AML reports for the MLRO, and provide Deputy MLRO cover once approved.
Data protection: Act as the data protection lead, keeping UK GDPR compliance on track day to day, from subject access requests to data breaches, to running impact assessments and maintaining records of processing and retention.
Wider compliance: Keep policies, controls and registers current across client money, conflicts, complaints, undertakings, vulnerable clients, lender panel requirements, information security and supplier due diligence.
Breaches and escalations: Own the breach and incident framework and assess what potential reports to the CLC, for the HOLP's decision. Challenge senior stakeholders constructively and escalate issues when needed.
Risk, governance and monitoring: Maintain the risk register, run a risk-based monitoring plan informed by transaction reviews and control testing, and report regularly to the HOLP and board.
Compliance automation: Partner with tech, conveyancing and ops teams to design, embed and operationalise automated compliance gates, including in 'Ludo', their AI conveyancing agent.
Culture: Train colleagues on AML, data protection and regulatory duties, and keep looking for ways to improve how we work.

What They're Looking For:

Essential background

At least five years in compliance or risk in a regulated or directly relevant environment, with deep hands-on AML experience, including handling internal suspicion reports and SARs.

Experience in an early-stage or scaling business, where you built compliance processes from scratch rather than inheriting a mature function

Strong knowledge of the MLRs 2017, POCA, UK sanctions and LSAG guidance. You don't need to know the CLC Handbook already, but you can get up to speed with CLC requirements quickly.
Experience of managing data protection compliance day to day, including subject access requests, data breaches, impact assessments and records of processing.
A track record of building compliance frameworks from scratch: risk assessments, registers, monitoring and board reporting. You know the difference between first-line supervision and second-line oversight.
An AI-first mindset: you've invested time learning about AI and experimented with AI tools at work and at home. You want to use AI to create real leverage, not just efficiency gains.
Sound judgement in a fast-moving environment: you know when to slow down, escalate or seek a second review to protect clients and the firm.
Clear plain-English writing and a structured way of thinking about rules. You don't need to code.

Desirable

Experience of working in a tech business, ideally where you have worked closely with engineering and product teams.
Experience in residential property or property-related AML (such as mortgage lending or estate agency)
A recognised AML, compliance or risk qualification, such as an ICA Diploma, CAMS or the IRM Certificate.
A data protection or AI governance qualification, such as the BCS Practitioner Certificate, IAPP CIPP/E or IAPP AIGP

What's on Offer

• Competitive Salary and 5% employer pension
• Share options
• 25 days annual leave (plus bank holidays)
• Financial support for CPD requirements
• Vibrant central London offices with panoramic views and a great atmosphere
• Regular team lunches and socials, plus free snacks, drinks and barista coffee
• 30% off gym membership (to balance out the free snacks!)
• Indoor and outdoor ping-pong tables!