Compliance & IMS Lead

Location: Whittle-le-Woods

Purpose:

TVSSCS are seeking a Compliance & IMS Lead to own, lead, and continuously improve the organisation’s Integrated Management System (IMS) across a complex and diverse supply chain business operating across the UK and Europe.

This is not a role focused solely on assurance — it is about leading compliance as a business enabler, driving simplification, consistency, and effective implementation of governance across operational teams. The Compliance & IMS Lead will, ensuring that all regulatory, contractual, and certification requirements are embedded into day-to-day business activities.

Reporting to the Head of Compliance, the role operates with a high degree of autonomy and leadership, taking full accountability for the design, effectiveness, and performance of the IMS, whilst supporting SME colleagues to interpret and apply requirements in a practical and proportionate way.

You will be responsible for ensuring the organisation maintains and enhances compliance across key frameworks, including:

* ISO 9001 (Quality Management)

* ISO 27001 (Information Security)

* ISO 14001 (Environmental Management)

* ISO 45001 (Occupational Health & Safety)

* ISO 22301 (Business Continuity)

Alongside broader regulatory and client-driven requirements such as:

* PCI-DSS (Payment Card Industry Data Security Standard)

* DPA / UK GDPR (Data Protection Act and data privacy requirements)

* CE and CE+ marking compliance

* Contractual, industry-specific, and client compliance obligations

Main

Duties & Responsibilities:

Strategy & Leadership

Act as the lead owner of the Integrated Management System (IMS), driving a cohesive and simplified approach across all compliance frameworks.

Define and implement a practical, risk-based compliance strategy that supports operational delivery and business growth.

Lead the simplification and harmonisation of policies, processes, and controls across ISO and regulatory frameworks.

Promote a compliance-led culture, ensuring accountability sits within the business, supported by clear guidance and structure.

IMS Ownership & Compliance Framework

Take full accountability for the design, implementation, and continuous improvement of the IMS, aligned to Annex SL principles.

Ensure ISO standards (9001, 27001, 14001, 45001, 22301) are integrated into a single, efficient management system.

Incorporate broader compliance requirements (PCI, DPA/GDPR, CE/CE+, and client-specific standards) into the IMS framework.

Reduce complexity by eliminating duplication and creating clear, user-friendly compliance processes.

Own certification lifecycle management, including audits, recertification, and external assurance.

Audit, Assurance & Risk Management

Lead and deliver a risk-based internal audit programme across ISO and regulatory requirements.

Ensure effective management of non-conformities, incidents, and corrective actions, driving root cause resolution.

Develop and maintain a central risk and control framework, aligned to business and compliance priorities.

Provide clear, evidence-based assurance on compliance performance and risk exposure.

Operational Integration & SME Enablement

Embed compliance requirements into operational processes, supplier management, and contract delivery.

Act as a central point of expertise, supporting SMEs across Information Security, HSE, Quality, Sustainability, and Operations.

Enable subject matter experts to own compliance within their disciplines, providing structure, guidance, and governance.

Translate complex ISO and regulatory requirements into practical, workable solutions for operational teams.

Drive consistency in how compliance is applied across regions, functions, and contracts.

Regulatory & Client Compliance

Ensure compliance with key regulatory frameworks including PCI-DSS, UK GDPR/DPA, CE/CE+, and wider contractual obligations.

Maintain awareness of regulatory changes and ensure the business adapts proactively.

Support client compliance requirements, audits, and due diligence activities.

Ensure supplier compliance aligns with organisational and client standards.

Stakeholder Engagement & Influence

Act as the primary compliance lead across the business, engaging with senior stakeholders to drive…