Head of Legal & Compliance

Commify
Nottingham, UK
2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Regular working hours
Job source

Tech stack

Application Programming Interfaces (APIs) Software as a Service Platform as a Service (PAAS) Proprietary Software Phishing Privacy Controls Data Processing Api Design

Job description

We are seeking a seasoned, commercially-minded Head of Legal & Compliance to spearhead our global legal strategy and regulatory framework. As a high-growth CPaaS provider, we operate at the intersection of telecommunications, software, and data. This role requires a leader who can navigate the complexities of international telecoms law, data privacy, and multi-jurisdictional compliance while enabling rapid commercial expansion.., Legal Strategy & Leadership

  • Act as the primary legal advisor to the Executive Team and Board on global corporate matters, including M&A, equity raises, and corporate governance.
  • Lead, mentor, and scale a lean, high-performing legal and compliance function.
  • Manage external counsel spend and relationships across different global territories (EMEA, APAC, and AMER).

Commercial & Technology Contracts

  • Oversee the drafting and negotiation of complex international MSAs, SLAs, and partnership agreements with global carriers and enterprise clients.
  • Advise on intellectual property (IP) protection and licensing strategies for our proprietary software and API suites.
  • Streamline the sales-legal lifecycle through the implementation of automated contract management tools.

Regulatory & Telecoms Compliance

  • Navigate global telecommunications regulations (e.g., Ofcom in the UK, FCC in the US, and equivalent bodies globally) regarding messaging, voice, and numbering resources.
  • Ensure the business remains compliant with evolving ā€œKnow Your Customerā€ (KYC) and ā€œKnow Your Contentā€ requirements to prevent platform fraud and phishing.

Data Privacy & Security

  • Serve as (or oversee) the Data Protection Officer (DPO), ensuring strict adherence to UK GDPR, EU GDPR, and other global privacy frameworks (CCPA/CPRA, etc.).
  • Work closely with the CTO to ensure ā€œPrivacy by Designā€ in product development and maintain robust data processing agreements (DPAs).

Risk Management & Ethics

  • Develop and enforce global compliance policies, including Anti-Bribery and Corruption (ABC), Anti-Money Laundering (AML), and modern slavery statements.
  • Manage any litigation, disputes, or regulatory inquiries, ensuring minimal brand and financial exposure.

Requirements

Do you have experience in PaaS?, Qualified Solicitor: Must be fully qualified to practice law in England & Wales, possessing substantial Post-Qualified Experience that demonstrates a deep understanding of legal principles and the ability to apply them effectively in complex B2B commercial contexts. Experience in managing high-value transactions, negotiating contracts, and providing strategic legal advice.

Sector Expertise: Proven and demonstrable experience working within the CPaaS (Communications Platform as a Service), SaaS (Software as a Service), or Telecommunications sectors is essential. Candidates should have a strong grasp of industry-specific regulations, regulators, challenges, and opportunities, enabling them to offer insightful and practical legal counsel tailored to these dynamic markets.

You must understand the nuances of API-based services and global message routing, including the technical and regulatory intricacies involved in delivering seamless connectivity across the US and EU markets. Familiarity with cross-border global compliance requirements, data privacy laws, and telecommunications infrastructure will be critical to effectively support the business’s international operations.

Pragmatism: A pragmatic, ā€œbusiness-firstā€ approach to law is required, focusing on finding innovative ways to facilitate positive outcomes and saying ā€œyesā€ wherever possible through effective risk mitigation strategies. Rather than acting as a bottleneck, the ideal candidate will work collaboratively with commercial teams to enable growth while safeguarding the company’s interests.

Communication: Exceptional ability to distil complex legal jargon into clear, concise, and actionable business advice that can be readily understood and implemented by non-legal stakeholders. Strong interpersonal skills, including the capacity to influence decision-making and build trusted relationships across various teams and executive leadership, are essential.

Benefits & conditions

Pulled from the full job description

  • Annual leave
  • Company pension
  • Private medical insurance, * Competitive Salary
  • Bonus Scheme based on Company performance
  • Private Healthcare & Dental
  • 27 days annual leave plus Bank Holidays
  • Birthday off work
  • Wellbeing days off and giving back days
  • 5% employer pension contribution
  • Death in service (4x salary)
  • Access to ā€œCalmā€ a wellbeing and mental health app for you and your family
  • Ā£350 Holiday voucher
  • Monthly/quarterly socials
  • Training & Development opportunities
  • Hybrid working

About the company

At Commify, we’re not just a company-we’re a globally connected team of innovators who love what we do. As a CPaaS leader with over 25 years of groundbreaking experience, we’re the force behind over 7 billion customer interactions each year, enabling businesses worldwide to connect via advanced channels like SMS, RCS, and complex mobile journeys.

Our culture is our core strength. Operating across the UK, EMEA, the USA, and Australia, we’ve fostered a truly diverse and connected environment, earning a consistent 4 out of 5 culture score in our employee engagement surveys. You’ll join a vibrant team where your diverse experience makes a daily global impact.

We need talented people to grow a global company where everyone feels proud to belong, have a purpose and do their best to directly shape the digital future.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:17 min

Bridging the gap between software development and license compliance

Kevin Kevin +1 Ā· World Congress 2025

1:29 min

Evaluating phishing emails that leverage artificial time constraints

Mauro Verderosa Ā· LIVE

3:10 min

Understanding the core concepts of API design

Alen Pokos Ā· LIVE

2:10 min

Defining stream data processing versus standard event processing

Soroosh Khodami Soroosh Khodami Ā· World Congress 2024

1:31 min

Abstracting regulatory compliance and fraud prevention behind interfaces

Arik Shtilman Ā· World Congress 2023

2:39 min

Exposing stored XSS and phishing attacks via markdown

Ramona Schwering Ramona Schwering Ā· World Congress 2026 Europe

Videos

See all

Related articles

See all