Governance & Assurance Manager

About us

SFG
20 is the industry standard for building maintenance. Providing services and pioneering technologies that empower people to create and sustain safer buildings.

Our mission is to make buildings better using our standard software and expertise. Our vision is to become the leading authority for built environment maintenance that protects and enhances quality of life.

About the role

The Governance & Assurance Manager will establish own and continually improve SFG
20s governance and compliance framework supporting enterprise growth customer assurance and regulatory obligations.

The role will act as the central point of contact for customer due diligence information governance and ISO management ensuring SFG
20 maintains the governance capability expected by enterprise and public sector customers while delivering and maintaining ISO 9001 and ISO 27001 certification following separation from BESA.

This is a new role providing the opportunity to build governance capability from the ground up.

Customer Assurance

• Own the end-to-end management of customer assurance activities including:

• Vendor Risk Assessments (VRAs)

• Security questionnaires

• Customer due diligence

• Compliance responses for bids and tenders

• Coordinate responses across internal functions ensuring responses are accurate consistent and delivered within customer deadlines.

• Maintain and continually improve the customer assurance knowledge base.

ISO & Certification Management

Lead the implementation certification and ongoing maintenance of:

• ISO 9001

• ISO 27001

• Cyber Essentials/Cyber Essentials Plus

Including:

• Internal audits

• Management reviews

• Corrective actions

• Continuous improvement

• External certification audits

• Annual surveillance audits

Governance Compliance & Risk

• Coordinate compliance activities across the business.

• Support supplier assurance activities.

• Maintain governance evidence and audit records.

• Ensure regulatory and contractual obligations are met.

• Support customer and external audits.

• Own governance policies procedures and document control.

• Monitor compliance activities and produce management reporting.

• Promote good governance across the organisation.

• Compliance and internal processes for Data Protection

Essential

• Experience managing ISO 9001 and/or ISO 27001.

• Experience responding to customer security questionnaires or vendor assessments.

• Experience developing governance frameworks and policies.

• Strong project management skills.

• Excellent written communication.

• Ability to influence stakeholders across all levels.

• Strong organisational skills.

• Comfortable interpreting technical information for non-technical audiences.

Desirable

• ISO 9001 Lead Implementer or Internal Auditor

• ISO 27001 Lead Implementer or Internal Auditor

• Knowledge of Cyber Essentials Plus

• Knowledge of GDPR

• Experience with Loopio or similar proposal management software.

• Experience with in SaaS technology or enterprise software.

• Experience working with public sector customers.

All candidates must be able to demonstrate a pre-existing right to work and travel within the UK. We are unfortunately not able to offer sponsorship. Documentary evidence will be required.

All offers are subject to satisfactory vetting and reference checks.

Our Benefits:

• 26 days holiday Bank holidays buy up to 5 days

• Private Medical insurance with BUPA

• Remote/Hybrid first policy

• Employee Assistance programme with We Care

• Enhanced Family Friendly Benefits

• Gym Discounts

• and more!

Equal opportunities for everyone

Diversity and inclusion are our priorities and were ensuring we have lots of support so our people can grow at SFG
20 and do their best work!

We embrace diversity by fostering an inclusive environment where everyone feels welcome safe and able to bring their whole self to work.

Were an equal opportunity employer. Applicants will be considered for employment without attention to age ethnicity religion sex sexual orientation gender identity family or parental status national origin veteran neurodiversity or disability status.

If theres anything we can do to accommodate your specific situation please let us know.

Required Experience:

Manager