GRC Manager

Franklin Fitch; Swindon; On-site; GBP 60,000 - 90,000; Full time

Job summary

Franklin Fitch is seeking an experienced Risk & Compliance Manager to lead the GRC framework and manage governance, risk and compliance across the organisation.

You will work closely with senior stakeholders to strengthen governance, ensure regulatory alignment and drive a proactive risk culture within a technology services environment in Swindon.

Qualifications

• Proven experience in governance, risk and compliance roles.
• Experience in technology/IT services or regulated environments.
• Strong understanding of enterprise risk management and compliance best practices.
• Knowledge of legal, regulatory and contractual requirements.
• Experience designing policies, controls and risk frameworks.
• Excellent stakeholder management and relationship-building skills.
• Analytical, organised and problem-solving abilities.
• Ability to translate complex regulatory concepts into practical solutions.
• Professional qualifications in risk/compliance are desirable.

Responsibilities

• Lead development and continuous improvement of the GRC framework.
• Own and maintain the corporate risk register with risk monitoring.
• Ensure compliance with relevant legislation, regulations and contracts.
• Develop, implement and maintain governance policies, controls and procedures.
• Coordinate customer audits and supplier assurance activities.
• Monitor regulatory changes and advise on impact.
• Lead compliance monitoring, internal reviews and corrective actions.
• Support business continuity and resilience initiatives.
• Produce risk and compliance reports for senior leadership.
• Promote a culture of compliance and continuous improvement.

Skills

Governance

Risk management

Compliance

Internal Audit

Regulatory knowledge

Stakeholder management

Policy development

Audit coordination

Business continuity

Education

IRM / ICA / CISA / ISO Lead Auditor or equivalent

Job description

An established and growing technology services organisation is seeking an experienced Risk & Compliance Manager to lead the development and ongoing management of its Governance, Risk and Compliance (GRC) framework.

This newly created role is responsible for ensuring the business operates in line with legal, regulatory, and contractual requirements while supporting commercial objectives and effectively managing organisational risk. Working closely with senior stakeholders, you'll strengthen governance, enhance compliance processes, and foster a culture of proactive risk management across the organisation.

Responsibilities

• Lead the development and continuous improvement of the organisation's Governance, Risk and Compliance (GRC) framework.
• Own and maintain the corporate risk register, ensuring effective risk identification, assessment, mitigation, and monitoring.
• Ensure compliance with relevant legislation, regulations, contractual obligations, and industry standards.
• Develop, implement, and maintain governance policies, procedures, and internal controls.
• Coordinate customer audits, supplier assurance activities, and due diligence processes.
• Monitor regulatory and legislative changes, assessing their impact and advising the business accordingly.
• Lead compliance monitoring activities, internal reviews, and corrective action programme.
• Support business continuity planning and organisational resilience initiatives.
• Produce risk and compliance reports, providing insights and recommendations to senior leadership.
• Promote a strong culture of compliance, risk awareness, and continuous improvement throughout the organisation.

Requirements

• Proven experience in a Risk, Compliance, Governance, or Internal Audit role.
• Experience within a technology, IT services, or other regulated environment.
• Strong understanding of governance, enterprise risk management, and compliance best practices.
• Good knowledge of legal, regulatory, and contractual compliance requirements.
• Experience designing and implementing policies, controls, and risk management frameworks.
• Excellent stakeholder management skills, with the ability to influence and build relationships at all levels.
• Strong analytical, organisational, and problem‑solving abilities.
• Excellent communication skills, with the ability to translate complex regulatory and compliance requirements into practical business solutions.
• Relevant professional qualifications such as IRM, ICA, CISA, ISO Lead Auditor, or equivalent are desirable.