JSM Group
Governance Specialist & Auditor
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About JSM
At JSM Group, we are a leading specialist infrastructure engineering company. We design and install the complex power networks, digital infrastructure and specialist systems a future-focused worldwide marketplace needs — from high-power grid connections to critical utilities, data centres to renewable energy.
Our full turnkey solution teams manage the full scope of complex infrastructure projects, helping clients deliver at speed, on time and with reduced legislative, technical and commercial risk.
About the Team
You'll join JSM's Management Systems, Assurance and Governance function, part of our Group SHEQ (Safety, Health, Environment & Quality) business line. The function keeps our ISO 9001, 14001, 27001 and 45001 certified Integrated Management System, our industry accreditations and our governance frameworks audit-ready across every JSM site and international entity.
You'll report to the Senior Management Systems & Governance Manager and work closely with SHEQ Business Leads, Heads of Function and Operational Leads across the business, plus the Data Protection Officer and IT on information security and AI governance. The role is based in Potters Bar, with regular travel to operational sites across the UK — expect a mix of desk-based document control and reporting, and time on site running audits and gathering evidence.
About the Role
As Governance Specialist & Auditor, you'll be the engine room of JSM's Management Systems, Assurance and Governance function — turning our accreditations, policies and controls into evidence that stands up to scrutiny.
Day to day, you will:
- Maintain the Integrated Management System documentation set — document control, version management, review cycles and publication — so policies, procedures and forms stay current and in house style
- Plan and deliver the risk-based internal audit programme across ISO 9001, 14001, 27001 and 45001, key business and financial processes, and internal controls, at JSM sites and international entities
- Prepare for and support external certification and surveillance audits, coordinating evidence, hosting auditors and tracking findings to closure
- Maintain industry accreditations and pre-qualification submissions, including Constructionline and Achilles, closing gaps ahead of renewal
- Support the Data Protection Officer with the data protection framework — the Record of Processing Activities, DPIAs, data subject requests and the breach log
- Maintain the governance registers that underpin good business conduct — sanctions screening, gifts & hospitality, conflicts of interest and the AI register — and report on them periodically
- Track non-conformances and improvement actions to closure, and coach the internal auditor pool on live audits
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
This is a hybrid role: regular travel across UK operational sites alongside office-based work from Potters Bar.
About You
You'll do well here if you recognise yourself in this:
- You're hungry to grow and you take personal responsibility for your work and your development
- You're comfortable with complexity and you'd rather solve a hard technical problem than avoid it
- You work well across disciplines — you know good delivery depends on civil, power and digital teams pulling in the same direction
- You use sound judgment under pressure and you're straight with people about risk and programme
- You care about evidence and detail as much as improvement — you'd rather fix a root cause than close the paperwork on it
Experience
Essential
- Experience in a governance, audit, compliance or SHEQ role within a utilities, engineering or construction environment
- Practical experience planning and conducting internal audits against ISO standards and other systems of internal control, and writing clear, evidence-based reports
- Strong written communication skills, with the ability to draft procedures and policies in plain, accessible language
Desirable
- Experience maintaining industry pre-qualification accreditations such as Constructionline or Achilles
- Experience supporting a Data Protection Officer or information security function
Requirements & Qualifications
Essential
- A Level 6 qualification or above in a relevant discipline
- ISO Internal Auditor qualification in at least one of ISO 9001, 14001, 45001 or 27001
- Working knowledge of UK GDPR, the Data Protection Act 2018 and other governance requirements
- Full UK driving licence and right to work in the UK
Desirable
- ISO Lead Auditor qualification
- Data protection foundation training (e.g. BCS Foundation Certificate in Data Protection, or equivalent)
- Working towards, or willing to work towards, chartered professional membership
Get help with your application
Your very own career expert that helps elevate your application to the next level.
If you meet most but not all of the above, we'd still like to hear from you. We'll look at what you've delivered and what you're capable of, not just the list.
Engineered to Belong
At JSM Group, we're not just shaping the future of utilities, we're raising the bar for what a great place to work looks like.
Our values aren't words on a wall. They drive every decision we make and every project we take on, pushing us to go further, do better, and leave a real mark on the industry.
We want people who are hungry to grow, ready to take on complex challenges, and excited to work alongside clients and partners who are changing the landscape of the utility sector across the UK, Europe and beyond. In return, we give you the room to develop fast, the work to stretch you, and the platform to build a career that actually means something.
What We Offer
In addition to an industry competitive salary, we offer:
- Car allowance, where applicable
- Performance-linked bonus, where applicable
- Pension — 4% employer, 4% employee contribution
- 25 days annual leave plus bank holidays — edit as required
- Free eye exams
- Health cash plan (BUPA) — cashback on dental, optical and physiotherapy
- Healthcare plan (Benenden Health) — faster medical advice, private diagnostics and treatment alongside the NHS
- Employee assistance programme
- Electric car scheme — lease a fully maintained EV through salary sacrifice
- Retail & gym discounts
- Funded training and development through our Training Centre and Competency Cloud, professional membership and a clear route to chartership or higher authorisation
Diversity, Inclusion & Equal Opportunities
JSM Group is an equal opportunities employer. We're building teams that reflect the communities and clients we work for, and we believe better engineering comes from bringing different experience into the same room.
We're committed to making our recruitment process accessible. If you need an adjustment at any stage — to the application, the interview format or the assessment — tell us and we'll sort it. Every application is assessed on skills, experience and potential.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location