Risk and Compliance Manager

ENODA; City of Edinburgh; On-site; GBP 70,000 - 80,000; Full time

Benefits offered by this job

Private Medical Insurance

Enhanced Parental Leave

Flexible Pension policy tailored to你的你

Job summary

ENODA Ltd is seeking an experienced Risk and Compliance Manager to lead the enterprise risk management framework and corporate compliance across the organisation.

You will strengthen risk and compliance processes, oversee the GRC platform (Vanta) and provide leadership reports to senior management, while line-managing the QMS System Administrator and supporting development across teams.

Qualifications

• Experience implementing enterprise risk processes in tech, engineering, or manufacturing environments.
• Knowledge of ISO 31000 and implementing risk management frameworks.
• Experience developing corporate compliance processes and monitoring.
• Experience using GRC platforms or similar systems.
• Strong analytical skills with risk assessments, KRIs, dashboards, and reporting.
• Experience managing staff alongside hands-on responsibilities.

Responsibilities

• Lead the implementation and continual improvement of ENODA's Enterprise Risk Management framework.
• Develop risk assessment methodologies, registers, treatment plans and review processes.
• Support risk appetite, tolerance levels and escalation thresholds for leadership approval.
• Develop KRIs, dashboards and reporting to identify emerging risks and support decisions.
• Embed risk management across Engineering, Manufacturing, Operations, IT & Security and other departments.
• Coordinate supplier and third‑party risk assessments with relevant teams.
• Maintain corporate compliance arrangements, including obligations registers and policies.
• Coordinate policy reviews, attestations and compliance checks and monitor corrective actions.
• Manage and develop the use of Vanta as ENODA's GRC platform and its workflows.
• Prepare clear risk and compliance reports for senior leadership and governance forums.
• Support risk awareness and compliance capabilities through guidance and workshops.
• Provide line management to the QMS System Administrator and develop team members.

Skills

Risk management

Stakeholder engagement

Line management

Risk assessment

Tools

Vanta

GRC platforms

Job description

• Compensation: GBP 70,000 - GBP 80,000 - yearly

Company Description

ENODA’s world-class team are building the first truly decentralised, intelligent energy system that will reshape how we generate, store, and distribute energy.

Foundational to our holistic and integrated platform approach, theENODAPRIME® Exchanger isafirst-of-a-kind dynamic power flow hardware designed tomaintain“on-target” frequency and voltage, increasing grid efficiency and capacity for distributed energy sources like renewables and EVs.

ENODAENSEMBLE™ is our ecosystem co-ordinator of ENODA andthird-partyassets, able to forecast, aggregate, and bid capacity in real time, functioning as a networked “operating system” for the electrical grid.

This is more than simply managing electricity flow. It is about creating the foundational system to prepare for a radically more capable, prosperous, and intelligent future.

We have an opportunity for an experienced, hands-on Risk and Compliance Manager to join our business as we continue to scale.

In this role, you will lead the implementation and ongoing management of ENODA's Enterprise Risk Management (ERM) framework and corporate compliance arrangements, helping the business identify, manage and respond effectively to risks as we grow.

Working across departments, you will strengthen risk and compliance processes, oversee the use of Vanta as our Governance, Risk and Compliance (GRC) platform, and provide meaningful reporting to support management decisions.

This is an opportunity for someone who enjoys combining hands-on delivery with stakeholder engagement and people management. You will also line-manage assigned team members, including the QMS System Administrator function, supporting their development and continuous improvement across ENODA.

Position Objectives & Areas of Responsibility:

• Leading the implementation, operation and continual improvement of ENODA's Enterprise Risk Management framework.
• Developing and maintaining risk assessment methodologies, risk registers, treatment plans and review processes, working closely with departmental risk owners.
• Supporting the development of risk appetite, tolerance levels and escalation thresholds for leadership approval.
• Developing Key Risk Indicators (KRIs), risk dashboards and reporting to identify emerging risks, monitor trends and support informed decisions.
• Working with Engineering, Manufacturing, Operations, IT & Security and other departments to embed effective risk management into business activities and projects.
• Coordinating supplier, third-party and specialist risk assessments with relevant departments, ensuring appropriate monitoring and escalation.
• Maintaining corporate compliance arrangements, including obligations registers, policy requirements, monitoring activities and supporting evidence.
• Coordinating corporate policy reviews, employee attestations and compliance checks, identifying control weaknesses and monitoring corrective actions.
• Managing and developing the use of Vanta as ENODA's GRC platform, including risk and control records, evidence management, compliance workflows and action tracking.
• Preparing clear risk and compliance reports for senior leadership, Management Review and relevant governance forums.
• Supporting risk awareness and compliance capability across the organisation through practical guidance, workshops and stakeholder engagement.
• Providing line management to assigned team members, including the QMS System Administrator function, setting objectives, managing performance and supporting development.
• Working collaboratively with Legal, Internal Audit, Quality, IT & Security, Health & Safety and other specialist functions to promote effective risk management, compliance and continuous improvement.

Qualifications

• Demonstrable experience implementing and managing enterprise or operational risk processes within a technology, engineering, manufacturing or similarly complex environment.
• Practical working knowledge of ISO 31000, with experience implementing and operating an effective risk management framework.
• Experience developing and maintaining corporate compliance processes, including obligations tracking, policy management, monitoring and corrective actions.
• Practical experience using GRC platforms or comparable risk and compliance management systems.
• Strong analytical skills, including risk assessments, KRIs, dashboards and management reporting.
• Experience directly managing and developing staff alongside hands-on operational responsibilities.
• Ability to influence senior leaders, engage stakeholders and provide constructive challenge.
• Strong organisational, communication and problem-solving skills, with sound judgement and attention to detail.

The following would be advantageous:

• Professional risk or compliance qualifications, such as IRM, PRM, CRISC or equivalent.
• Experience using Vanta or a comparable GRC platform.
• Exposure to ISO 27001, third-party risk management or corporate assurance activities.
• Experience in a growing technology, engineering or manufacturing organisation.
• Experience supporting organisational change, process improvement or implementation of management frameworks.

Additional Information

• Private Medical Insurance
• Enhanced Parental Leave
• Flexible Pension policy tailored to your requirements
• 33 days annual leave + Holiday purchase/sell scheme
• Season travel ticket loan
• Enhanced company sick pay & Income Protection
• Life Assurance