GRC Officer

TwinStream Limited; United Kingdom; Remote; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Pension Plan

Private Medical Healthcare

Learning and Development

Flexible Working

Electric Vehicle Scheme

Holidays 28 days + BH

Job summary

TwinStream Limited is seeking a Governance, Risk and Compliance professional to own the day-to-day GRC activities and shape our approach to governance, risk and compliance across the business.

You’ll work with teams across the organisation to meet UK regulatory and contractual requirements, including ISO standards and Cyber Essentials Plus, while reporting to leadership with clear evidence of compliance. Remote work from the UK is supported.

Qualifications

• Experience in governance, compliance, risk, assurance or auditing roles.
• Practical experience with ISO-certified management systems (e.g., ISO 9001, ISO 27001).
• Good understanding of governance, risk and compliance principles with practical risk management.
• Ability to apply pragmatic, proportionate GRC approaches in a growing org.
• Experience maintaining policies, processes, registers or controlled docs.
• Experience conducting or supporting internal audits and assurance activities.
• Strong communication skills for varied audiences.

Responsibilities

• Own day-to-day governance and compliance operations, including ISO management systems.
• Plan and conduct internal audits and assurance activities.
• Coordinate external certification audits and assessments (ISO).
• Ensure records and evidence demonstrate compliance, identify gaps, drive actions.
• Produce clear compliance reports for senior leadership.
• Collaborate with stakeholders to manage risks and drive actions to completion.
• Maintain awareness of regulatory, contractual and industry requirements and respond accordingly.
• Provide practical GRC guidance to teams and translate requirements into actions.
• Identify opportunities to simplify or strengthen the GRC approach and implement improvements.

Skills

Governance, risk & compliance

ISO management systems

Auditing & assurance

Policy management

Jira & Confluence

UK gov/regulatory requirements

Remote work in UK

Tools

Jira

Confluence

Atlassian Suite

Job description

In 2019, the founders were working as engineers solving complex cross-domain problems within government organisations.

TwinStream was formed to bring together their collective expertise and experience into a single business, focused on delivering technical excellence and high-quality service to clients.

Since then, the company has grown to over 100 team members across the UK, with colleagues working both on-site with clients, hybrid and remotely from home.

Details:

Location: Fully remote

About the role

As our Governance, Risk and Compliance (GRC) professional, you’ll take ownership of core GRC activities and play a leading role in shaping and improving our approach to governance, risk and compliance across the business.

You’ll work closely with teams across the organisation to help them understand, meet and demonstrate compliance requirements in a practical and proportionate way. Our compliance landscape is varied, covering UK legislation and regulation, UK government commercial and contractual requirements, MOD security standards, Cyber Essentials Plus, ISO 27001, ISO 9001, ISO 20000-1 and ISO 14001.

Working alongside an experienced Information Security Manager, who will provide specialist cyber security expertise, and other business leads, you’ll bring the GRC knowledge and perspective needed to ensure we meet our obligations, manage risk effectively and maintain clear evidence of compliance for internal and external stakeholders.

Responsibilities

• Own the day-to-day operation, maintenance and continuous improvement of the organisation’s governance and compliance activities, including ISO-certified management systems.
• Plan and conduct internal audits and other assurance activities.
• Lead the coordination of external certification audits and compliance assessments, including those relating to ISO-certified management systems.
• Ensure the appropriate records and evidence are in place to demonstrate compliance, identifying gaps and driving corrective actions where needed.
• Produce clear, meaningful compliance reports for senior leadership.
• Coordinate and collaborate with stakeholders across the organisation to ensure risks are managed effectively, share requirements, gather information, coordinate governance and compliance activities, and drive agreed actions through to completion.
• With support from subject matter experts, maintain an overview of existing and emerging regulatory, contractual and industry requirements, helping to coordinate the organisation’s response where changes are needed.
• Act as a trusted point of contact for GRC across the business, providing practical advice and guidance and helping teams understand what requirements mean for them.
• Proactively identify opportunities to strengthen or simplify the organisation’s GRC approach, bringing forward ideas and taking ownership of improvements through to implementation.

Key Skills

• Demonstrable experience in governance, compliance, risk, assurance, auditing or closely related roles.
• Practical experience supporting or maintaining one or more ISO-certified management systems.
• A good understanding of governance, risk and compliance principles, including practical risk management.
• Ability to apply a pragmatic and proportionate approach to governance and compliance, balancing requirements and best practice with the practical realities, resources and risk profile of a growing organisation.
• Experience maintaining policies, processes, registers or other controlled documentation.
• Experience conducting or supporting internal audits, compliance reviews or other assurance activities.
• Strong verbal and written communication skills, with the ability to tailor communications to different audiences.
• Highly organised and proactive, with the ability to manage multiple activities and deadlines, engage effectively with stakeholders, and ensure others follow through on agreed actions.
• Experience interpreting compliance requirements and translating them into practical actions for the business.
• Confidence using a range of digital tools and systems, with the ability to quickly get to grips with new technology and find effective ways to use it in your work. We currently use Jira and Confluence for work planning, knowledge sharing and collaboration.
• Ability to work effectively remotely and in a flexible, agile environment. Please note that remote working is only permitted from within the UK.
• Practical experience supporting or maintaining ISO 9001.
• Experience coordinating surveillance, recertification or certification audits for ISO-certified management systems.
• Experience supporting compliance with UK government commercial or contractual requirements.
• Internal auditor training.
• Delivery or project management experience and training.
• Experience developing compliance reports, metrics or dashboards.
• Proficiency with the Atlassian suite, particularly Jira.

There are many great reasons to join our team!

Pension Plan

Secure your future with our competitive pension plan that offers an 8% employer contribution.

Private Medical Healthcare

Your health and well-being are our top priorities. Enjoy comprehensive private medical healthcare, which includes dental and optical care for you and your family.

Learning and Development

Your career is in your hands. We empower you to take charge of your own development, giving you the autonomy to shape your growth.

Flexible Working

We understand the importance of balancing work and life. Flexibility is not just a policy for us; it is part of our culture. We are passionate about helping you seamlessly integrate work with your home life.

Electric Vehicle Scheme

Drive sustainability forward with our electric vehicle leasing scheme. You can take advantage of this initiative through a convenient salary sacrifice program.

Holidays

Enjoy annual leave of 28 days, plus bank holidays, allowing you to recharge and spend time on what matters most.

Team Events

We love celebrating our achievements! In addition to our quarterly meetings, you can look forward to our Christmas and summer parties—opportunities to relax, reflect, and have fun as a team.

Additional Benefits

We provide life assurance for your peace of mind and a cycle-to-work scheme to support your health and sustainability goals.

Diversity & Inclusion

We’recommitted to building a diverse and inclusive workplace. We welcome applications from people of all backgrounds, experiences, and identities.

If you need any adjustments during the recruitment process, please let us know. We’re here to support you

Further Information:

Due to the nature of the work and the sectors we support, any offer of employment will be subject to the successful completion of the relevant security screening and clearance process.

This role requires eligibility for [BPSS / SC / DV] clearance. As part of the vetting process, candidates must meet the UK Government's residency and right-to-work requirements associated with the required level of clearance.