Risk and Compliance Associate

PGI is a global consultancy that helps organisations build digital resilience. We deploy our people to implement solutions on behalf of clients or to support them in developing their own capabilities. Our vision is a world resilient to digital threats and online harm. To achieve this, we need to grow our team of talented and passionate people.

Our clients include some of the most well‑known global brands, national governments, and innovative growing businesses. We operate in an exciting, fast‑growing sector that bears increasing relevance and importance to nation‑states, corporates, universities, and NGOs.

This role is focused on providing hands‑on support across a broad range of Risk & Compliance activities. You will help maintain certifications, coordinate audits and governance processes, support risk management activities, and work collaboratively with stakeholders across the organisation. You will also provide additional capacity for business‑critical initiatives and help ensure Risk & Compliance continues to enable business performance rather than act as a barrier to it.

While primarily a support role, you will be expected to work with a high degree of autonomy and act as deputy to the Head of Risk & Compliance when required, including taking ownership of key activities, supporting senior stakeholder engagement, and representing the function during periods of absence.

Working closely with the Head of Risk & Compliance, you will help coordinate and deliver key risk, governance, information security, and compliance activities, ensuring the function continues to operate effectively while supporting the wider business.

Strong communication and relationship‑building skills are essential, as you will work with colleagues at all levels of the organisation, external auditors, clients, suppliers, and certification bodies. You will provide appropriate challenge, support sound decision‑making, and contribute to the delivery of a pragmatic and commercially focused Risk & Compliance function. Your responsibilities will include, but are not limited to:

• Support the maintenance and coordination of ISO 27001 certification, acting as lead coordinator when required.
• Coordinate internal audits, business continuity exercises, and related compliance activities.
• Maintain key governance artefacts, including the Corrective Actions Log, Audit Schedule, and Continuous Improvement Plan.
• Support risk assessments, management reviews, supplier security due diligence, and the review and maintenance of security policies, procedures, and plans.
• Coordinate security awareness and training programmes, including new starter inductions, and manage the company's e-learning platform (Usecure).
• Provide guidance and support on day‑to‑day data protection matters, acting as a key point of contact and escalating complex issues where appropriate.
• Support and, where required, oversee the organisation's ongoing compliance with GDPR and wider data protection requirements.
• Monitor and support compliance with client contractual obligations relating to data protection.
• Support the Head of Risk & Compliance in maintaining corporate and departmental risk registers, taking ownership of activities when required.
• Promote a positive, proportionate, and risk‑aware culture across the organisation.
• Support business growth and delivery by providing Risk & Compliance input throughout the sales process, including bid submissions and customer due diligence questionnaires.
• Support the maintenance and review of corporate governance policies, including Anti‑Bribery and Code of Conduct policies.
• Coordinate activities supporting the maintenance of ISO 9001 certification across the organisation.
• Maintain corporate certifications…