Head of Risk & Compliance

Sanderson Plc; Greater London; On-site; GBP 90,000 - 110,000; Full time

Job summary

Sanderson Plc is seeking a Head of Governance, Risk & Compliance in Basildon with two days onsite. You will oversee governance, risk, compliance, quality assurance and legal controls across the business, reporting to the executive leadership and supporting growth.

You will lead the GRC framework, act as Company Secretary for Board governance, manage internal audit, regulatory compliance and resilience programs, including data protection and AI governance, across all functions.

Qualifications

• Experience building governance, risk and control frameworks.
• Reporting to senior leadership and the Board.
• Internal audit, compliance monitoring or risk management.
• Managing policies, procedures and internal controls.
• Governing commercial contracts and third-party risk.
• Operational resilience, business continuity and disaster recovery.
• Data protection and information security knowledge.
• Familiarity with ISO 9001/27001.

Responsibilities

• Lead the organisation's GRC framework across the business.
• Act as Company Secretary and support Board governance activities.
• Oversee internal audit, compliance and quality assurance processes.
• Manage corporate legal and contractual governance, supplier risk.
• Own the enterprise risk management, business continuity and DR.
• Establish governance reporting, KPIs, risk dashboards for leadership.
• Monitor AI governance and related controls across functions.
• Review SDLC governance, testing standards and QA practices.
• Identify control weaknesses and drive improvements.

Skills

GRC framework

Board reporting

Internal audit

Regulatory compliance

Data protection

AI governance

ISO 9001/27001

Contracts & vendor risk

Job description

Head of Governance, Risk & Compliance

Basildon (2 days onsite)

100,000 + Additional Benefits

Overview

We're supporting a growing insurance organisation seeking an experienced Head of Governance, Risk & Compliance to provide oversight of governance, compliance, risk, quality assurance and legal controls across the business.

Reporting into the executive leadership team, this role will be responsible for ensuring that governance frameworks, internal controls, risk management processes and quality standards are operating effectively while supporting the organisation's continued growth.

Key Responsibilities

• Lead the organisation's Governance, Risk & Compliance (GRC) framework.
• Act as Company Secretary and support Board governance activities.
• Oversee internal audit, compliance and quality assurance processes across all business functions.
• Manage corporate legal and contractual governance, including customer and supplier agreements, due diligence and commercial risk.
• Own the enterprise risk management framework, business continuity and disaster recovery programmes.
• Support operational resilience initiatives, including data protection and DORA-related requirements.
• Provide oversight of ISO9001 and ISO27001 compliance and continuous improvement activities.
• Establish governance reporting, KPIs, risk dashboards and management information for senior leadership and the Board.
• Monitor and govern emerging areas including AI development, AI risk management and related controls.
• Review and enhance software delivery lifecycle (SDLC) governance, testing standards and quality assurance practices.
• Identify control weaknesses, recommend improvements and drive implementation across the business.

Experience Required

• Building and improving governance, risk and control frameworks.
• Working with senior leadership and Boards to provide reporting, oversight and assurance.
• Internal audit, compliance monitoring or risk management.
• Managing policies, procedures and internal controls across an organisation.
• Reviewing and governing commercial contracts, supplier agreements and third-party risk.
• Operational resilience, business continuity and disaster recovery planning.
• Data protection, information security and regulatory compliance programmes.
• ISO9001, ISO27001 or similar quality and control frameworks.
• Technology governance, software delivery life cycle (SDLC) oversight or IT risk management.
• Quality assurance, testing governance or process improvement initiatives.
• Emerging areas such as AI governance, AI risk management and responsible technology controls.

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason please let us know when you apply or talk to the recruiters directly so we can support you.