About the role
This is a hands-on interim role supporting the Head of Risk & Compliance across governance, information security, risk management and data protection activities.
You will play a key role in maintaining the organisation’s compliance framework, supporting ISO certifications, coordinating audits, managing risk activities, and providing compliance input into client bids and due diligence processes.
The successful candidate will be comfortable working autonomously, engaging with stakeholders across the business, and providing support during a period of senior team absence.
Key responsibilities
- Act as a point of contact for GDPR and data protection queries, providing practical guidance to the business
- Support the ongoing management of information security and compliance frameworks
- Maintain risk registers and support risk management activities across the organisation
- Coordinate ISO27001 and ISO9001 certification activities, including audit preparation and engagement with external auditors
- Manage compliance documentation, audit schedules, corrective action logs and improvement plans
- Provide Risk & Compliance support for client bids, tenders and customer due diligence questionnaires
- Support supplier security assessments and third-party due diligence activities
- Review and maintain corporate governance policies and compliance documentation
What you'll bring
- Experience within a Risk, Compliance, Governance, Information Security or GRC role
- Strong understanding of GDPR and UK data protection requirements
- Experience supporting ISO27001 certification, audits or information security governance activities
- Experience managing risk registers and compliance processes
- Strong stakeholder management skills, with the confidence to work with internal teams, clients, auditors and external partners
- Ability to work independently, prioritise effectively and take ownership of key activities
Desirable
- Consultancy or client-facing experience
- Experience supporting bids, tenders or customer due diligence processes
- Previous experience supporting a DPO or acting as a data protection contact
- ISO27001 Lead Auditor, CISSP or CISM certification
- Experience deputising for a senior Risk, Compliance or Information Security leader
Rate:
£60,000/year
Location:
London
IR35 Status:
Not specified
Remote Status:
Hybrid
Industry:
Legal & Compliance
Seniority Level:
Mid-Level