Compliance Manager

FirstGroup plc; Sheffield; Hybrid; GBP 40,000 - 50,000; Full time

Benefits offered by this job

Free Bus Travel

Discounted Train Travel

25 days annual leave + holidays

Pension scheme

FirstXclusives Discounts

24/7 Employee Assistance Programme

Job summary

FirstGroup plc’s First Customer Contact division seeks a Compliance Manager for a 12‑month fixed-term contract in Sheffield. You will oversee Data Protection, Information Security, Risk and Quality practices, ensuring UK GDPR compliance and governance standards across FCC’s ISMS and QMS.

The role supports remediation, audits, and continuous improvement. You will maintain DSARs, DPIAs and monitor risk registers while coordinating with third-party suppliers and stakeholders to strengthen

Qualifications

• Data Protection, Compliance, Information Security, Risk Management, or Governance roles.
• UK GDPR knowledge and privacy best practices.
• Managing DSARs, DPIAs, and data-breach investigations.
• Maintaining ISO 27001 and ISO 9001 management systems.
• Maintaining risk registers and managing governance and security risks.
• Planning internal audits, compliance monitoring, and assurance activities.
• Driving corrective actions and continuous improvement.
• Understanding information security controls and risk management methodologies.
• Engaging with third-party suppliers and conducting due diligence.

Responsibilities

• Data Protection, Compliance, Information Security, Risk Management, or Governance activities.
• Implement UK GDPR, Data Protection Act 2018, and privacy best practices.
• Manage DSARs, DPIAs, and data breach investigations.
• Maintain ISO 27001 and ISO 9001 systems.
• Maintain risk registers and manage governance and security risks.
• Plan and deliver internal audits and compliance monitoring.
• Lead corrective actions and continuous improvement initiatives.
• Understand information security principles and controls.
• Perform third-party due diligence.

Skills

Analytical skills

Attention to detail

Communication skills

Stakeholder engagement

Organisational skills

Independent working

Proactive risk management

Integrity and confidentiality

Tools

ISMS tools

DPIA tooling

Audit management software

Job description

Compliance Manager - 12 month Fixed Term Contract

Salary:£40,000 - £50,000 (37.5 hourcontract)

Who are we?

First Customer Contact sits at the heart of FirstGroup’s commitment to delivering outstanding customer experiences. As an established, multi‑brand contact centre, we support millions of passengers across First Rail’s operations, including Great Western Railway, Avanti West Coast, HullTrainsand Lumo. Our teams play a vital role in helping customers travel with confidence across intercity, commuter, regional and sleeper services

We use industry‑leading systems and a continually evolving service model to ensure every customer receivestimely,accurateand empathetic support. From compensation and complaints handling to group travel,assistedtravel services, retail sales, fraud prevention and quality assurance, our specialist teams manage a wide range of customer needs with professionalism and care.

As part of FirstGroup, one of the UK’sleading rail operators and one of the country’s biggest transport employers, First Customer Contact contributes to a wider mission: making travel simpler, morereliableand more sustainable. With circa 30,000 colleagues across the UK and Ireland, FirstGroup is committed to reducing environmental impact and delivering transport services that help people move better every day.

About the job

• The Business Integrity & Compliance Team is responsible for data protection, information security, governance, risk management, and quality compliance across FCC. The team provides assurance and guidance to ensure compliance with legal, regulatory, and certification requirements while promoting a culture of integrity and continuous improvement.

• Reporting to the Head of Business Integrity & Compliance, this role is responsible for the day-to-day management of Data Protection, Information Security, Risk, and Quality Management activities. The role supports compliance with UK GDPR, information security requirements, and internal governance standards.

• Key responsibilities include maintaining FCC's ISO 27001 Information Security Management System (ISMS) and ISO 9001 Quality Management System (QMS), managing Data Subject Rights Requests (DSARs), Data Protection Impact Assessments (DPIAs), compliance monitoring, incident management, third-party assurance, and audit activities.

• The role will also maintain compliance and information security risk registers, oversee remediation actions, monitor emerging risks, and provide management reporting to support effective governance and decision-making across the business

Your main responsibilities will be:

• Data Protection, Compliance, Information Security, Risk Management, or Governance roles.

• Implementing knowledge of UK GDPR, the Data Protection Act 2018, and privacy best practices.

• Managing Data Subject Rights Requests (DSARs), Data Protection Impact Assessments (DPIAs), and data breach investigations.

• Maintaining and supporting certified management systems, including ISO 27001 and ISO 9001.

• Maintaining risk registers and managing compliance, information security, and operational risks.

• Planning and delivering internal audits, compliance monitoring, and assurance activities.

• Managing corrective actions and driving continuous improvement initiatives.

• Understanding information security principles, controls, and risk management methodologies.

• Working with third-party suppliers and conducting compliance or security due diligence assessments.

As a minimum, you will need to have:

• Strong analytical and problem-solving skills.
• Excellent attention to detail and ability to interpret regulatory requirements.
• Strong written and verbal communication skills, including report writing and presenting management information.
• Ability to influence and engage stakeholders at all levels of the organisation.
• Strong organisational skills with the ability to manage multiple priorities.
• Ability to work independently and exercise sound judgement.
• Proactive approach to identifying and mitigating risks.
• Commitment to high standards of integrity, professionalism, and confidentiality.

About the location

Sheffield city centre. Ten minutes’ walk from Sheffield Station. Travel to other UK locations asappropriate.

Working pattern
37.5 hours per week

Benefits

We believegreat workdeserves great rewards.That’swhy we offer a comprehensive benefits package designed to support your lifestyle, well-being, and future:

• Competitive Pay -We offer a salary that reflects your skills, experience, and the valuable contributionyou’llmake to our team.

• Free Bus Travel –Complimentary travel on FirstGroup buses for you after 1 month of service.

• Discounted Train Travel –Enjoy all day travel for you and your family for as little as £6 across Avanti West Coast, Great Western Railway, Hull Trains and Lumo after 6 months of service

• Generous Holiday Allowance–25 days of annual leave plus public holidays

• Pension Scheme –Contributory pension plan with the opportunity to invest in discounted FirstGroup shares through a SAYE scheme

• FirstXclusivesDiscount Scheme –Unlock over 3,000 deals on high street brands, cinema tickets, flights, holidays, and more

• 24/7 Employee Assistance Programme -Confidential support whenever you need it, because your wellbeing matters.