Senior Compliance & Risk Manager

We're looking for a Senior Compliance & Risk Manager to join our team on a permanent basis, based in either Bradford or London King's Cross. This is a hybrid role, with a blend of office and home working.

As our Senior Compliance & Risk Manager, you'll play a key role in strengthening our culture of compliance, governance, and risk management across the business. You'll lead the delivery and continuous improvement of our risk management framework, aligned to ISO 31000, helping teams identify, assess, and manage risk effectively. Working as part of the Governance, Risk & Compliance team, you'll also oversee our integrated management system, including ISO 45001 and other recognised standards, ensuring our frameworks remain compliant, fit for purpose, and fully embedded into day-to-day operations.

This is a fantastic opportunity to influence business-wide decision‑making and drive a proactive approach to risk and compliance.

• Lead and continually enhance our risk management framework, ensuring risks are effectively identified, assessed, prioritised, mitigated, and monitored across the business.
• Manage and develop our compliance frameworks, including ISO 45001 and other relevant ISO standards, ensuring they remain effective, compliant, and aligned with business needs.
• Conduct and oversee complex compliance and incident investigations, carrying out root cause analysis and implementing corrective and preventative actions.
• Keep abreast of changes in legislation, regulation, and industry standards, translating requirements into practical policies, controls, and processes.
• Own and maintain the company's central risk register, providing oversight of risk management activities and ensuring appropriate escalation and reporting.
• Partner with the wider Governance, Risk & Compliance team, Facilities Management, People Team, and business stakeholders to foster a strong culture of compliance, risk awareness, and continuous improvement.
• Act as the key contact for external auditors and UKAS‑accredited certification bodies, managing audits and maintaining ISO certifications.
• Lead management reviews, internal audits, and corrective action programmes to drive compliance and operational excellence.
• Deliver training, coaching, and expert guidance on health, safety, risk, and compliance requirements across the organisation.
• Monitor supplier and third‑party compliance against relevant ISO standards and organisational requirements.
• Track and analyse Key Risk Indicators (KRIs), providing meaningful insights and reporting to senior leadership teams.
• Support the expansion and evolution of our ISO management systems to meet new business requirements, regulatory obligations, and international standards.

• Bachelor's degree or equivalent relevant qualification.
• Extensive experience managing risk across operational, regulatory, health & safety, compliance, and technology environments.
• Strong knowledge and practical experience of implementing and maintaining ISO management systems, including ISO 14001, ISO 45001, and other recognised standards.
• Proven understanding of risk management frameworks and methodologies, such as ISO 31000 and the ISO 27000 series.
• Excellent stakeholder management and collaboration skills, with the ability to work effectively across multiple functions and teams.
• Strong organisational and project management capabilities, with the ability to manage priorities and deliver against deadlines.
• Highly developed risk assessment, compliance monitoring, and control evaluation skills.

• Experience working within a technology‑led organisation or Business Process Outsourcing (BPO) environment.
• Professional certification in the implementation, management, or auditing of ISO standards.
• Experience with additional ISO frameworks, such as ISO 42001, ISO 27001, ISO 22301, and ISO 27701.
• Familiarity with compliance and governance platforms such as Vanta, One Trust, or similar tools.
• Strong analytical, research, and problem‑solving skills.
• Ability to quickly understand complex technologies, products, services, and the associated regulatory and policy considerations.
• Proven ability to prioritise competing…