[Hiring] GRC Officer @TwinStream

Role Description

As our Governance, Risk and Compliance (GRC) professional, you’ll take ownership of core GRC activities and play a leading role in shaping and improving our approach to governance, risk and compliance across the business.

You’ll work closely with teams across the organisation to help them understand, meet and demonstrate compliance requirements in a practical and proportionate way. Our compliance landscape is varied, covering:

• UK legislation and regulation
• UK government commercial and contractual requirements
• MOD security standards
• Cyber Essentials Plus
• ISO 27001
• ISO 9001
• ISO 20000-1
• ISO 14001

Working alongside an experienced Information Security Manager, you’ll bring the GRC knowledge and perspective needed to ensure we meet our obligations, manage risk effectively and maintain clear evidence of compliance for internal and external stakeholders.

Responsibilities

• Own the day-to-day operation, maintenance and continuous improvement of the organisation’s governance and compliance activities, including ISO-certified management systems.
• Plan and conduct internal audits and other assurance activities.
• Lead the coordination of external certification audits and compliance assessments, including those relating to ISO-certified management systems.
• Ensure the appropriate records and evidence are in place to demonstrate compliance, identifying gaps and driving corrective actions where needed.
• Produce clear, meaningful compliance reports for senior leadership.
• Coordinate and collaborate with stakeholders across the organisation to ensure risks are managed effectively, share requirements, gather information, coordinate governance and compliance activities, and drive agreed actions through to completion.
• Maintain an overview of existing and emerging regulatory, contractual and industry requirements, helping to coordinate the organisation’s response where changes are needed.
• Act as a trusted point of contact for GRC across the business, providing practical advice and guidance.
• Proactively identify opportunities to strengthen or simplify the organisation’s GRC approach, bringing forward ideas and taking ownership of improvements through to implementation.

Qualifications

• Demonstrable experience in governance, compliance, risk, assurance, auditing or closely related roles.
• Practical experience supporting or maintaining one or more ISO-certified management systems.
• A good understanding of governance, risk and compliance principles, including practical risk management.
• Ability to apply a pragmatic and proportionate approach to governance and compliance.
• Experience maintaining policies, processes, registers or other controlled documentation.
• Experience conducting or supporting internal audits, compliance reviews or other assurance activities.
• Strong verbal and written communication skills, with the ability to tailor communications to different audiences.
• Highly organised and proactive, with the ability to manage multiple activities and deadlines.
• Experience interpreting compliance requirements and translating them into practical actions for the business.
• Confidence using a range of digital tools and systems, particularly Jira and Confluence.
• Ability to work effectively remotely and in a flexible, agile environment.

Desirable Skills

• Practical experience supporting or maintaining ISO 9001.
• Experience coordinating surveillance, recertification or certification audits for ISO-certified management systems.
• Experience supporting compliance with UK government commercial or contractual requirements.
• Internal auditor training.
• Delivery or project management experience and training.
• Experience developing compliance reports, metrics or dashboards.
• Proficiency with the Atlassian suite, particularly Jira.

Benefits

• Pension Plan: Competitive pension plan with an 8% employer contribution.
• Private Medical Healthcare: Comprehensive private medical healthcare, including dental and optical care for you and your family.
• Learning and Development: Empowerment to take charge of your own development.
• Flexible Working: A culture that supports work-life balance.
• Electric Vehicle Scheme: Electric vehicle leasing scheme through a salary sacrifice program.
• Holidays: Annual leave of 28 days, plus bank holidays.
• Team Events: Quarterly meetings and seasonal parties to celebrate achievements.
• Additional Benefits: Life assurance and a cycle-to-work scheme.
• Diversity & Inclusion: Commitment to building a diverse and inclusive workplace.

Further Information

Due to the nature of the work and the sectors we support, any offer of employment will be subject to the successful completion of the relevant security screening and clearance process. This role requires eligibility for BPSS / SC / DV clearance.