Candidates must be eligible to work in the UK. We will not be able to provide visa sponsorship for this position. Due to the volume of applications expected, only shortlisted candidates will be contacted.

Essential Duties and Responsibilities

• Conduct due diligence assessments on third parties and customers to ensure compliance and mitigate operational and reputational risk.
• Maintain and continuously improve organisational policies, procedures, and controls relating to information security, data privacy, quality assurance, and business continuity.
• Ensure effective implementation of policies and controls to support compliant, ethical, and efficient business operations.
• Identify, assess, and mitigate compliance and operational risks, maintaining risk registers and control frameworks.
• Lead internal audits and support external audits, ensuring findings are documented, tracked, resolved, and reported appropriately.
• Provide guidance and support to colleagues and cross-functional stakeholders (including Sales and Operations) on compliance requirements, policies, and best practices.
• Respond proactively and in a timely manner to internal and external compliance information requests.
• Maintain up-to-date knowledge of regulatory requirements and industry best practices, implementing improvements where required.
• Maintain accurate and comprehensive compliance records and documentation.
• Advise senior management on regulatory, risk, and compliance matters, and prepare regular compliance reports highlighting key risks, issues, and recommended actions.
• Support continuous improvement initiatives to enhance efficiency, scalability, and compliance, and foster a culture of compliance, risk awareness, and collaboration across the organisation.

Knowledge, Skills, and Abilities Required:

Experience and Technical Knowledge

• Minimum of 4 years’ experience in a dedicated compliance role.
• In-depth knowledge and firsthand experience managing ISO 9001, ISO 14001, ISO 27001, and ISO 18841 standards in a small-to-medium-sized organisation.
• Proven record of contributing to successful accreditation or certification processes, including auditor-facing responsibilities, for ISO 9001, ISO 14001, and ISO 27001.
• Experience working with GDPR and related data privacy requirements.
• Knowledge of PCI-DSS compliance is desirable.
• Experience and understanding of Business Continuity Planning (BCP) principles and practices.
• Strong collaborator with excellent interpersonal and verbal communication skills.
• High standard of written English and ability to produce clear, concise documentation.
• Initiative-taking, able to take initiative, and work independently with minimal supervision.
• Exceptional attention to detail and a methodical approach to work.
• Flexible, pragmatic, and solutions-focused problem-solving abilities.
• Experience working remotely and collaborating effectively in virtual environments.
• Highly proficient in MS Office applications.
• Ability to communicate in British Sign Language is advantageous but not essential.

Other General Requirements/Additional Notes

• Occasional travel may be required.

Benefits

• Vitality Private Health Insurance
• 32 days A/L (Including Bank holiday), increasing to 33 days after 2 years (pro-rata)
• Cycle Scheme
• Tech Scheme
• Workplace Pension
• British Sign Language Level 1, 2 & 3
• Personal VRS & VRI Package
• Life Assurance Benefit
• Company Sick Pay
• We Care Service (paid time to volunteer)

Equal Opportunity Employer

We believe that different perspectives and backgrounds are what make a successful company. All qualified applicants will receive equal consideration for employment regardless of race, colour, religion, sex, sexual orientation, gender identity, national origin, economic status, disability, age, or any other legally protected characteristics. We are proud to be an inclusive company with values grounded in equality and ethics, where we celebrate, support, and embrace diversity.