Compliance Analyst, Lawful Access

We received 2,417 orders for access to customer traffic and records last year, across four regions and nineteen authorities. This desk reads every one, checks it against the instrument it claims, and either serves it or refuses it. We contested four.

Responsibilities

• Review inbound orders for validity, scope and jurisdiction inside the statutory clock, which in two regions is 24 hours.
• Scope the technical response with Trace Operations and Hall Operations so that what is handed over is what was ordered and nothing adjacent to it.
• Maintain the register. Every order, every response, every refusal, retained indefinitely. The register itself is disclosable to exactly one authority and you will learn which.
• Draft the refusal where an order is defective. Refusals are rare and are read closely by people who did not expect one.
• Prepare the transparency figures for annual publication, and the longer set that is not published.
• Handle standing orders — currently 31 — including the quarterly re-validation that several authorities regard as a formality and we do not.

Requirements

• Three years in regulatory compliance, lawful intercept, law-enforcement liaison or a paralegal function at a communications provider.
• Reading fluency in the instruments: warrants, production orders, preservation notices, and the difference between them at speed.
• Enough network literacy to recognise when a technical scope is wider than the legal one. This is the entire value of the role.
• The composure to refuse an authority in writing, and to be the named contact when it calls back.
• Tier 3 screening on offer. Prior authority employment is disclosable and is not a bar.

Nice to have

• Qualified lawyer, any region. Not required and reasonably common on the desk.
• Second region's statutory framework in working detail.
• Experience of a standing order that outlived the matter it was issued for.

Process

1. Application read by the hiring manager, not by a filter. Five working days.
2. Screening call, 30 minutes, with the recruiter for the team named on the requisition.
3. Technical or desk conversation, 90 minutes, with two people you would work beside.
4. Site visit, half a day, at the facility named on the requisition. You will walk a hall.
5. Offer, with the band, the screening tier and the on-call obligation stated in writing.