SFG20
Governance & Assurance Manager

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About us
SFG20 is the industry standard for building maintenance. Providing services and pioneering technologies that empower people to create and sustain safer buildings.
Our mission is to make buildings better using our standard, software and expertise. Our vision is to become the leading authority for built environment maintenance that protects and enhances quality of life.
About the role
The Governance & Assurance Manager will establish, own and continually improve SFG20's governance and compliance framework, supporting enterprise growth, customer assurance and regulatory obligations.
The role will act as the central point of contact for customer due diligence, information governance and ISO management, ensuring SFG20 maintains the governance capability expected by enterprise and public sector customers while delivering and maintaining ISO 9001 and ISO 27001 certification following separation from BESA.
This is a new role, providing the opportunity to build governance capability from the ground up.
About the role | Key Responsibilities
Customer Assurance
Own the end-to-end management of customer assurance activities including:
- Vendor Risk Assessments (VRAs)
- Security questionnaires
- Customer due diligence
- Compliance responses for bids and tenders
Coordinate responses across internal functions, ensuring responses are accurate, consistent and delivered within customer deadlines.
Maintain and continually improve the customer assurance knowledge base.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
ISO & Certification Management
Lead the implementation, certification and ongoing maintenance of:
- ISO 9001
- ISO 27001
- Cyber Essentials/Cyber Essentials Plus
Including:
- Internal audits
- Management reviews
- Corrective actions
- Continuous improvement
- External certification audits
- Annual surveillance audits
Governance, Compliance & Risk
Coordinate compliance activities across the business.
Support supplier assurance activities.
Maintain governance evidence and audit records.
Ensure regulatory and contractual obligations are met.
Support customer and external audits.
Own governance policies, procedures and document control.
Monitor compliance activities and produce management reporting.
Promote good governance across the organisation.
Compliance and internal processes for Data Protection
About you
Essential
- Experience managing ISO 9001 and/or ISO 27001.
- Experience responding to customer security questionnaires or vendor assessments.
- Experience developing governance frameworks and policies.
- Strong project management skills.
- Excellent written communication.
- Ability to influence stakeholders across all levels.
- Strong organisational skills.
- Comfortable interpreting technical information for non-technical audiences.
Desirable
- ISO 9001 Lead Implementer or Internal Auditor
- ISO 27001 Lead Implementer or Internal Auditor
- Knowledge of Cyber Essentials Plus
- Knowledge of GDPR
- Experience with Loopio or similar proposal management software.
- Experience within SaaS, technology or enterprise software.
- Experience working with public sector customers.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Additional Information
All candidates must be able to demonstrate a pre-existing right to work and travel within the UK. We are unfortunately not able to offer sponsorship. Documentary evidence will be required.
All offers are subject to satisfactory vetting and reference checks.
Our Benefits:
- 🏖 26 days holiday + Bank holidays + buy up to 5 days
- 🏥 Private Medical insurance with BUPA
- 🏡 Remote/Hybrid first policy
- 💙 Employee Assistance programme with WeCare
- 👨👩👧 Enhanced Family Friendly Benefits
- 🏋️♂️ Gym Discounts
- 🚀 and more!
Equal opportunities for everyone
Diversity and inclusion are our priorities, and we’re ensuring we have lots of support so our people can grow at SFG20 and do their best work!
We embrace diversity by fostering an inclusive environment where everyone feels welcome, safe and able to bring their whole self to work.
We’re an equal opportunity employer. Applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity or disability status.
If there’s anything we can do to accommodate your specific situation, please let us know.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills