Purpose of the Role
As the Compliance Officer at Blueskeye AI, you will be the central pillar of our commitment to quality, security, and ethical innovation. You will own, manage, and continuously improve our Integrated Management System (IMS), ensuring we not only meet but exceed the requirements of international standards and client expectations. Your mission is to champion a culture of compliance and continual improvement across the organisation, turning our robust governance frameworks into a key competitive advantage.
What You’ll Be Doing
Integrated Management System (IMS) Ownership
* Take full ownership and accountability for the effectiveness of the Blueskeye Quality Management System (QMS) and Information Security Management System (ISMS).
* Lead the continual improvement of the IMS to ensure its ongoing suitability, adequacy, and effectiveness in line with ISO 9001, ISO 27001, ISO 42001, TISAX, ASPICE, and IEC 62304 requirements.
Audit Management
* Plan, schedule, and lead the internal audit programme to verify that the management system conforms to internal requirements and the requirements of the IMS.
* Act as the primary point of contact for all external audits (certification, customer, regulatory), coordinating activities, preparing teams, and managing auditor relationships.
Process Governance & TISAX Programme Management
* Work closely with Process Owners to ensure all top-level processes are clearly defined, documented, and maintained as per the QMS framework.
* Manage the end-to-end TISAX process, from registration and scope definition to assessment and exchange, and lead the TISAX self-assessment based on the VDA ISA catalogue.
Compliance Frameworks & Documentation
* Oversee the document control system, ensuring that all policies, procedures, and records are created, updated, and controlled.
* Manage and maintain compliance with data protection regulations, including GDPR, ensuring principles like data minimisation and transparency are embedded in all processes.
Improvement & Risk Management
* Manage the Corrective and Preventive Action (CAPA) system, ensuring nonconformities are investigated, root causes are identified, and effective actions are implemented.
* Facilitate risk and opportunity assessments related to the IMS, products, and services.
Reporting & Communication
* Prepare for and facilitate Management Review meetings with the Executive Team, reporting on the performance of the IMS and the status of quality objectives.
What You’ll Bring
Skills & Strengths
* Excellent communication, interpersonal, and stakeholder management skills, with the ability to engage and influence from the engineering team to the executive level.
* Strong understanding of risk management principles, corrective action processes, and document control.
* Ability to promote and facilitate the process approach and risk-based thinking throughout the organisation.
Knowledge & Experience
* Must-Haves:
* Proven experience in a compliance, quality, or audit role within a software development or technology-focused company.
* In-depth knowledge and hands-on experience implementing and maintaining management systems based on ISO 9001:2015 and ISO 27001:2022.
* Demonstrable experience leading and successfully passing external certification audits.
* Nice-to-Haves:
* Certified as an internal or lead auditor for ISO 9001 and/or ISO 27001.
* Direct experience with the TISAX assessment process (ENX portal/VDA ISA).
* Familiarity with software development lifecycle standards such as ASPICE or IEC 62304.
* Knowledge of AI-specific standards like ISO 42001 (AI Management Systems).
* Working knowledge of data protection regulations, particularly GDPR.
* Experience in the automotive or healthcare sectors, or with tools like Confluence and Jira.
What’s In It For You
Mission-Driven Impact & Ownership
* Be the Cornerstone of Ethical AI: You won't just maintain compliance; you'll be central to ensuring our technology remains private, fair, and transparent, directly supporting our mission to make a meaningful impact through technology.
* Strategic Visibility: Take full ownership of the Integrated Management System (IMS), where your work directly impacts our ability to scale across critical sectors like Automotive (TISAX) and Healthcare. You'll report to the CTO and facilitate Management Review meetings with the Executive Team, giving you high-level influence.
* Innovative & Collaborative Environment: Work alongside a team that is super smart, yet humble and supportive, in an agile startup environment that values initiative and fast learning.
Growth & Flexibility
* Unparalleled Learning Opportunity: Deepen your expertise across the most critical emerging standards, including ISO 42001 (AI Management Systems) and key sector standards like TISAX and ASPICE.
* Flexible Hybrid Working: Enjoy the flexibility of our hybrid working model from our Nottingham, UK location.
* Commitment to Your Development: As an employee, you will have equal access to training and professional development opportunities.
Inclusive Culture
* Be Yourself: Join a company that is committed to Equality, Diversity, and Inclusion, firmly believing that a diverse workforce fosters innovation.
* Supportive Team Integration: Benefit from a structured two-week induction plan to help you successfully integrate, including dedicated time for a CEO welcome chat, team lunches, and cross-team introductions.