Governance & Assurance Manager

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Develop, oversee, and continuously enhance the governance and compliance framework for SFG20.

• Facilitate enterprise expansion, ensure customer assurance, and meet regulatory requirements.

• Serve as the primary contact for customer due diligence, information governance, and ISO management.

• Achieve and uphold ISO 9001 and ISO 27001 certifications following the separation from BESA.

• Manage comprehensive customer assurance activities, which include Vendor Risk Assessments, security questionnaires, customer due diligence, and compliance responses for bids and tenders.

• Ensure accurate and timely responses across various internal functions while maintaining the customer assurance knowledge base.

• Lead the implementation, certification, and ongoing maintenance of ISO 9001, ISO 27001, Cyber Essentials, and Cyber Essentials Plus.

• Perform internal audits, management reviews, corrective actions, continuous improvement initiatives, external certification audits, and annual surveillance audits.

• Oversee compliance activities throughout the business and assist with supplier assurance efforts.

• Keep governance evidence and audit records up to date, ensuring that regulatory and contractual obligations are fulfilled.

• Assist with customer and external audits.

• Take ownership of governance policies, procedures, and document control.

• Monitor compliance activities and generate management reports.

• Advocate for strong governance practices across the organization.

• Manage compliance and internal processes related to Data Protection.

⛳️ Requirements

• Proven experience managing ISO 9001 and/or ISO 27001.

• Experience in responding to customer security questionnaires or vendor assessments.

• Background in developing governance frameworks and policies.

• Strong skills in project management.

• Exceptional written communication abilities.

• Capability to influence stakeholders at all levels.

• Strong organizational skills.

• Comfortable with interpreting technical information for non-technical audiences.

• ISO 9001 Lead Implementer or Internal Auditor certification is desirable.

• ISO 27001 Lead Implementer or Internal Auditor certification is desirable.

• Familiarity with Cyber Essentials Plus is desirable.

• Knowledge of GDPR is desirable.

• Experience with Loopio or similar proposal management software is desirable.

• Background in SaaS, technology, or enterprise software is desirable.

• Experience working with public sector clients is desirable.

• Pre-existing right to work and travel within the UK is required; sponsorship is not an option.

• Satisfactory vetting and reference checks are required.

🏝️ Benefits

• 26 days of holiday + Bank holidays + option to purchase up to 5 additional days.

• Private Medical insurance through BUPA.

• Remote/Hybrid work policy.

• Employee Assistance programme with WeCare.

• Enhanced Family Friendly Benefits.

• Discounts on gym memberships.

• Support for employee growth and development.

• An inclusive and diverse working environment.