GRC Officer

In 2019, the founders were working as engineers solving complex cross-domain problems within government organisations.

Twin Stream was formed to bring together their collective expertise and experience into a single business, focused on delivering technical excellence and high-quality service to clients.

Since then, the company has grown to over 100 team members across the UK, with colleagues working both on-site with clients, hybrid and remotely from home.

Location:

Fully remote

As our Governance, Risk and Compliance (GRC) professional, you’ll take ownership of core GRC activities and play a leading role in shaping and improving our approach to governance, risk and compliance across the business.

You’ll work closely with teams across the organisation to help them understand, meet and demonstrate compliance requirements in a practical and proportionate way. Our compliance landscape is varied, covering UK legislation and regulation, UK government commercial and contractual requirements, MOD security standards, Cyber Essentials Plus, ISO 27001, ISO 9001, ISO 20000-1 and ISO 14001.

Working alongside an experienced Information Security Manager, who will provide specialist cyber security expertise, and other business leads, you’ll bring the GRC knowledge and perspective needed to ensure we meet our obligations, manage risk effectively and maintain clear evidence of compliance for internal and external stakeholders.

• Own the day-to-day operation, maintenance and continuous improvement of the organisation’s governance and compliance activities, including ISO-certified management systems.
• Plan and conduct internal audits and other assurance activities.
• Lead the coordination of external certification audits and compliance assessments, including those relating to ISO-certified management systems.
• Ensure the appropriate records and evidence are in place to demonstrate compliance, identifying gaps and driving corrective actions where needed.
• Produce clear, meaningful compliance reports for senior leadership.
• Coordinate and collaborate with stakeholders across the organisation to ensure risks are managed effectively, share requirements, gather information, coordinate governance and compliance activities, and drive agreed actions through to completion.
• With support from subject matter experts, maintain an overview of existing and emerging regulatory, contractual and industry requirements, helping to coordinate the organisation’s response where changes are needed.
• Act as a trusted point of contact for GRC across the business, providing practical advice and guidance and helping teams understand what requirements mean for them.
• Proactively identify opportunities to strengthen or simplify the organisation’s GRC approach, bringing forward ideas and taking ownership of improvements through to implementation.

• Demonstrable experience in governance, compliance, risk, assurance, auditing or closely related roles.
• Practical experience supporting or maintaining one or more ISO-certified management systems.
• A good understanding of governance, risk and compliance principles, including practical risk management.
• Ability to apply a pragmatic and proportionate approach to governance and compliance, balancing requirements and best practice with the practical realities, resources and risk profile of a growing organisation.
• Experience maintaining policies, processes, registers or other controlled documentation.
• Experience conducting or supporting internal audits, compliance reviews or other assurance activities.
• Strong verbal and written communication skills, with the ability to tailor communications to different audiences.
• Highly organised and proactive, with the ability to manage multiple…