Head of Compliance

Bradford
6 months ago
Applications closed

Related Jobs

View all jobs

Head of Cyber Security Governance, Risk and Compliance

Head of InfoSec GRC & Awareness

Head of InfoSec

Head of IT

Head of Oracle Cloud Applications

Head of Oracle Cloud Applications - Fusion

Our client is a well established and successful manufacturer. They are looking for a Head of Compliance to join them on a permanent basis. This senior leadership role carries executive responsibility for ensuring the company remains compliant, audit-ready, and resilient in a fast-changing regulatory and operational landscape. The role will be office based in Bradford.
The Head of Compliance is the organisation’s primary custodian of compliance and risk governance, overseeing existing certifications (ISO 9001, 14001, 45001) and leading the implementation of new standards (ISO 27001, 42001, 22301, 44001, 20400).
Operating across both manufacturing and construction environments, the role provides visible leadership to ensure management systems not only achieve compliance but actively support safe project delivery, sustainable procurement, operational efficiency, and customer confidence.
PLEASE ONLY APPLY IF:

  • You are able to start with very short notice / immediately.
  • You have previous experience as a Head of Compliance / Senior Compliance Manager.
    Salary: £60,000
    Hours of work: 8.30am - 5.00pm, Monday to Friday (4.30pm finish on Fridays).
    Key Responsibilities:
    Standards & Certification:
    Maintain and continually improve compliance frameworks for ISO 9001, 14001, and 45001, ensuring alignment with both factory-based operations and construction site activities.
    Lead the implementation of ISO 22301 (Business Continuity) and support IT in embedding ISO 27001 (Information Security) and ISO 42001 (AI Management).
    Collaborate with the Head of Procurement to embed ISO 44001 (Collaborative Business Relationships) and ISO 20400 (Sustainable Procurement), ensuring supply chain governance balances compliance, sustainability, and commercial needs.
    Act as the company lead for certification and surveillance audits, ensuring full readiness for external assessments.
    Client Engagement & External Liaison:
    Represent the company during client audits, pre-qualification processes, and regulatory inspections for both manufacturing and construction projects.
    Act as a trusted point of contact for clients on compliance and assurance matters, providing accurate information and confidence in project delivery capability.
    Strengthen external relationships with auditors, certification bodies, and key supply chain partners.
    Governance & Risk:
    Maintain an enterprise-wide risk register and lead regular reviews with the SLT.
    Ensure risks associated with both workshop operations and on-site installation activities are identified, evaluated, and effectively mitigated.
    Oversee GDPR and DUAA compliance, including lawful use of data, privacy protections, and ethical AI practices.
    Health, Safety & Environment:
    Ensure compliance with ISO 45001, ISO 14001, and all UK HSE legislation, relevant to both factory and site-based environments.
    Lead investigations into incidents and non-conformances, implementing corrective actions and preventative improvements.
    Drive a proactive safety and sustainability culture across employees, contractors, and supply chain partners.
    Supplier & Subcontractor Assurance:
    Oversee the creation, approval, and management of Inspection & Test Plans (ITPs) for both in-house projects and subcontracted works, ensuring alignment with client requirements, ISO standards, and regulatory frameworks.
    Support Procurement in strengthening supplier and subcontractor assurance processes, particularly in construction project delivery.
    Lead due diligence and monitoring to ensure supply chain partners meet regulatory, sustainability, and ethical standards.
    Promote collaborative working principles (ISO 44001) and sustainable procurement practices (ISO 20400) to build resilient long-term partnerships.
    Leadership & Training:
    Foster a culture of compliance, accountability, and continuous improvement across manufacturing and construction teams.
    Deliver targeted training on compliance, auditing, health & safety, data protection, and risk awareness to staff at all levels.
    Line manage the QESH Assistant and H&S Advisor, supporting professional development and team capability.
    Required Qualifications & Experience:
    Essential:
  • Significant experience managing integrated ISO management systems in a manufacturing and/or construction environment.
  • Lead Auditor qualification (ISO 9001 or equivalent).
  • NEBOSH General Certificate (or equivalent).
  • Strong understanding of data protection, cyber security, and IT risk governance.
  • Practical experience implementing ISO standards, ideally including ISO 27001, ISO 42001, and ISO 22301.
  • Proven ability to lead client audits and liaise effectively with customers and external stakeholders.
  • Knowledge of CE marking, supplier assurance, UK trade regulations, and sustainable procurement practices.
  • Strong leadership, documentation, and audit readiness skills.
    Desirable:
  • Experience supporting procurement with supplier and subcontractor assurance in construction/ manufacturing projects.
  • Familiarity with ISO 44001 (Collaborative Business Relationships) and ISO 20400 (Sustainable Procurement).
  • Experience with Constructionline, CHAS, and SafeContractor.
  • Knowledge of DPIA and broader data governance processes.
  • Understanding of AI governance frameworks (DUAA, AI standards).
    Benefits:
  • Private healthcare
  • Salary sacrifice company pension scheme
  • Annual leave 25 days, Bank holidays + birthday day off
  • Laptop and flexible working where appropriate
  • Professional development and membership support
    This job would suit someone with previous experience as a Compliance Manager / Compliance Supervisor / Head of Quality and Compliance / Compliance Lead / Quality Manager

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Penetration Tester Jobs in the UK: What Employers Actually Want in 2026

The demand for skilled professionals in cyber security has never been higher, and penetration testers sit at the very heart of this rapidly evolving industry. As organisations across the UK continue to digitise their operations, protect sensitive data, and defend against increasingly sophisticated threats, the need for ethical hackers has grown dramatically. If you are considering a career in this field—or looking to advance within it—it is essential to understand what employers are really looking for in 2026. This guide breaks down the current expectations, required skills, certifications, and practical experience that can help you stand out in a competitive job market.

SOC Analyst Jobs UK 2026: Salaries, Skills & How to Get Hired

Cyber security is one of the UK's fastest-growing career paths — and SOC analyst is where most people begin. It's in high demand, genuinely accessible, and you don't need a degree or years of experience to get started. But knowing what UK employers actually want in 2026 — what they pay, which certs matter, and how to stand out — is a different matter. This guide covers all of it.

How Many Cyber Security Tools Do You Need to Know to Get a Cyber Security Job?

If you are trying to build or move forward in a cyber security career, it can feel like the list of tools you are expected to know never ends. One job advert asks for SIEM platforms, another mentions penetration testing tools, another lists cloud security, threat intelligence platforms, endpoint detection, scripting languages and compliance frameworks. Scroll LinkedIn and it gets worse. Everyone seems to “know” dozens of tools, certifications and platforms. Here is the reality most cyber security hiring managers agree on: they are not hiring you because you know every tool. They are hiring you because you understand risk, can think like an attacker and a defender, follow process, communicate clearly and make good decisions under pressure. Tools matter — but only when they support those outcomes. So how many cyber security tools do you actually need to know to get a job? For most job seekers, the answer is far fewer than you think. This article explains what employers really expect, which tools are essential, which are role-specific and how to focus your learning so you look credible, not overwhelmed.