Compliance & Sustainability Manager

Waltham Abbey
1 month ago
Create job alert

Compliance Officer

Full time - Office Based - Monday to Friday 9am to 5.30pm

£38-£42,000 per annum

Job Description

The Compliance & Risk Officer supports the effective operation of the Connects Governance, Risk and Compliance (GRC) framework, ensuring governance controls, risk processes, compliance, and regulatory requirements are consistently embedded across the organisation. This is a hands-on and dynamic role that will provide operational support for conducting risk assessments, internal audits, incident reporting and ongoing compliance readiness, helping the business remain resilient, audit-ready, and aligned with internal and external obligations.

Role Summary

The postholder will ensure compliance processes run effectively and that risk awareness is embedded across all business units. Working closely with the Compliance & Sustainability Manager and the General Manager, the officer will support enterprise risk management, maintain risk and compliance registers, and manage evidence repositories within our GRC platform, Hyper proof.

The role also provides cross-functional support for Health & Safety and data protection compliance, supplier due diligence, and operational incident management.

Key Responsibilities

Governance & GRC Administration

Support and administer the Governance, Risk & Compliance (GRC) framework across the organisation.

Maintain governance documentation, evidence repositories and controlled document logs in line with the company’s internal standards.

Manage the compliance calendar, including policy reviews, internal audit cycles, supplier reviews, and governance checkpoints.

Risk Management

Maintain the Enterprise Risk Register and coordinate quarterly risk reviews with risk owners.

Support risk identification, scoring and mitigation planning across all business units.

Assist with operational risk assessments (resilience, continuity, third-party dependence), and support with other areas of risk including, but not limited to compliance risk, ESG risk, ICT risk etc.

Monitor emerging risks and escalate concerns to the Compliance & Sustainability Manager.

Policy, Procedure & Document Governance

Support the development, writing, review, and implementation of policies, procedures, risk and control documents.

Ensure all documents follow Governance Table, version control, and classification standards.

Track annual review cycles and maintain an accurate policy and procedures repository.

Internal Audit & External Assurance

Support preparation for certification and client audits (ISO 9001, ISO 14001, ISO 27001, CE+, TAPA, insurance partner audits).

Help gather and maintain audit evidence and ensure all is always audit-ready.

Assist in conducting internal audits and following up on corrective actions.

Health & Safety

Oversee day-to-day Health & Safety operations, ensuring policies, procedures, and risk controls are effectively implemented across all sites.

Monitor H&S performance, maintain incident and inspection records, and support continuous improvement of the organisation’s safety management system.

Coordinate H&S training, toolbox talks, and compliance checks, ensuring staff awareness and adherence to statutory requirements.

Data Protection & Information Security

Provide day-to-day operational support for UK GDPR compliance under the direction of the General Manager (Data Protection Lead).

Third-Party / Supplier Compliance

Conduct supplier due diligence checks and maintain the supplier risk register.

Support ESG and sustainability-related supplier assessments (e.g., waste, recycling, carbon impact).

Coordinate annual supplier recertification, ensuring suppliers meet ours and client-specific authorised supplier list requirements.

Incident Management

Maintain the Incident Register and support incident investigations (security, data, operational, safety, environmental).

Assist with root-cause analysis, lessons learned, and corrective action tracking.

Ensure affected units/devices are handled in accordance with chain-of-custody, immobilisation, and TAPA requirements.

Training & Awareness

Help develop and deliver internal compliance training (policies, GDPR, risk awareness, incident reporting)

Promote a culture of risk awareness and continuous improvement across all departments.

Reporting

Produce regular KPI reports, dashboards, and summaries for leadership and governance committees.

Prepare briefing notes for senior management on governance effectiveness, risk status, and audit outcomes.

Essential

Experience working in a Risk Management role

Degree (or equivalent qualification/experience) in Law, Business, Risk Management, Compliance, or related discipline.

Professional certification in compliance, governance, or risk (e.g. ICA, IRM).

Essential

Demonstrable experience managing or maintaining a governance, risk, or compliance framework.

Understanding of risk assessment methods and mitigation planning.

Experience collaborating cross-functionally to support risk mitigation and policy adherence.

Proven track record in writing, implementing, or updating corporate policies and procedures.

Experience in conducting or supporting internal audit and client assurance processes.

Desirable

Experience working with external legal or regulatory advisors.

Experience working in an insurance/ electronics-related industry.

Familiarity with ISO frameworks (9001, 14001, 27001) or Cyber Essentials Plus.

Experience with Health & Safety, in a support role.

Skills & Competencies

Strong understanding of governance, compliance, and enterprise risk management.

Ability to translate regulatory and risk concepts into practical application across business functions.

Excellent written and verbal communication skills, with the ability to influence and engage stakeholders at all levels.

Strong attention to detail, with excellent organisational and documentation skills.

Analytical thinking with problem-solving capabilities and the ability to manage multiple priorities.

Proficient in using compliance tools, risk registers, and document control systems.

Proficient in Microsoft Office Suite

Related Jobs

View all jobs

Safety and Compliance Manager

Global Digital & Technology Manager

Head of Operations

Specialist Officer

Interim Head of Service – Street Scene & Leisure

Compliance and Operations Administrator

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Jobs for Career Switchers in Their 30s, 40s & 50s (UK Reality Check)

If you’re thinking about switching into cyber security in your 30s, 40s or 50s, you’re in good company. Across the UK, organisations of all sizes are hiring people from diverse backgrounds to protect systems, data & customers. But with hype around “hackers” & quick-win courses, it’s hard to separate reality from fiction. This guide gives you a UK reality check: which roles genuinely exist, what employers actually want, how training really works, what to expect on salary & progression & whether age matters. Whether you come from finance, project management, operations, law, HR or customer service, there is a credible route into cyber security if you approach it strategically.

How to Write a Cyber Security Job Ad That Attracts the Right People

Cyber security is now a board-level priority for organisations across the UK. From financial services and healthcare to critical infrastructure, SaaS platforms and the public sector, demand for skilled cyber security professionals continues to grow. Yet despite this demand, many employers struggle to attract the right candidates. Cyber security job adverts often generate large volumes of applications, but few are a genuine match. Meanwhile, experienced security engineers, analysts and architects quietly ignore adverts that feel vague, unrealistic or disconnected from real security work. In most cases, the problem is not a lack of talent — it is the quality of the job advert. Cyber security professionals are trained to assess risk, spot weaknesses and question assumptions. A poorly written job ad signals organisational immaturity and weak security culture. A well-written one signals seriousness, competence and trust. This guide explains how to write a cyber security job ad that attracts the right people, improves applicant quality and positions your organisation as a credible security employer.

Maths for Cyber Security Jobs: The Only Topics You Actually Need (& How to Learn Them)

If you are applying for cyber security jobs in the UK it can feel like “real security people” must be brilliant at maths. The reality is simpler: most roles do not need degree-level pure maths. What they do need is confidence with a small set of practical topics that show up repeatedly in day-to-day work across SOC, incident response, cloud security, AppSec, threat detection, IAM & security engineering. This guide strips the maths down to what actually helps you get hired. It includes a 6-week learning plan plus portfolio projects you can publish to prove the skills. You will focus on: Number systems & bitwise thinking (binary, hex, bytes, XOR) Modular arithmetic basics (enough to understand how modern crypto “works”) Probability & statistics for detection, triage & risk Discrete maths for logic, sets, graphs & complexity Security maths habits: estimation, false positive control & evidence-led reporting You will not waste time on heavy theory that rarely appears in junior or mid-level cyber security roles.