Risk & Compliance Officer

Novatech Ltd; Selsey; On-site; GBP 33,000 - 41,000; Full time

Benefits offered by this job

Nursery fees 50% contribution

Gym discount 25%

WPA Healthcare

Auto-enrolment pension

Employee ownership potential

Job summary

Target Professional Services in Selsey, West Sussex, is seeking a Risk & Compliance Officer to support regulatory compliance, audits, information security, data protection and ESG initiatives. The role involves coordinating audits, policy documentation, and supplier risk activities while maintaining audit-ready records.

The position offers a permanent contract with a starting salary of £37,000, working hours 36.15 per week, and a strong focus on governance, risk management and continuous

Qualifications

• Experience in a compliance, audit, governance, risk or information security role.
• Familiarity with management systems and assurance frameworks such as ISO 27001/27701/9001/14001.
• Experience supporting audits, compliance reviews or due diligence.
• Experience maintaining records, evidence, registers and documentation.
• Strong knowledge of Microsoft 365 apps (Word, Excel, Outlook, SharePoint).

Responsibilities

• Coordinate compliance monitoring activities and audits across the business.
• Support external audits, certification reviews and regulatory inspections.
• Maintain records, risk registers and incident logs with evidence.
• Support supplier onboarding, due diligence and third‑party risk reviews.
• Coordinate policy awareness, training records and evidence collection.

Skills

Compliance

Auditing

Governance

Risk management

Information security

Microsoft 365

Education

ISO Internal Auditor qualification

NEBOSH or IOSH certification

IAPP CIPP/E or data protection qualification

Business continuity or information security qualification

Tools

DPIA process

RoPA / policy evidence

Job description

Risk &Compliance Officer

Reporting to the Risk & Compliance Manager, the Risk & Compliance Officer supports the day-to-day delivery of compliance, risk, information security, data protection, supplier assurance, business continuity and health and safety activities. Through the coordination of audits, compliance monitoring, assurance, risk and certification activities, the role helps ensure the business remains compliant, audit-ready and able to meet its regulatory, contractual and certification obligations.

Key Responsibilities

Compliance, Assurance & Audit Support

• Coordinate compliance monitoring activities, internal reviews, audits and assurance programmes across the business.
• Coordinate corrective action tracking and follow-up activities arising from audits,incidentsand compliance reviews.
• Complete client due diligence requests, tenders, assurancequestionnairesand evidence gathering activities, ensuring submissions areaccurateand delivered within agreed timescales.
• Support the Risk & Compliance Manager in preparing for external audits, certification reviews, clientassessmentsand regulatory inspections.

Information Security, Data Protection & Digital Identity

• Support information security activities, including security training, awareness communications, access reviews, policy compliance monitoring, evidencecollectionand certification activities.
• Support data protection activities, includingRoPAs, DPIAs, privacy risk assessments and incident records.
• Support digital identity compliance and certification activities, including evidence maintenance, documentationupdatesand compliance monitoring.

Supplier Assurance & Third-Party Risk

• Support supplier onboarding, due diligence, assuranceassessmentsand ongoing monitoring activities.
• Maintain supplier records, assuranceevidenceand corrective actions, ensuring third-party compliance obligations are effectively managed.
• Support supplier risk reviews, contract compliancemonitoringand periodic reassessments.

Business Continuity & Incident Management

• Coordinate business continuity activities, testing schedules, incident logs, breachrecordsand corrective action tracking, ensuring documentationremainscomplete and audit ready.
• Support incident management and follow-up activities, ensuring actions are documented,trackedand progressed to completion.

Risk & Issue Management

• Maintain risk registers, issuelogsand non-conformance records, ensuring informationremainsaccurate,up-to-dateand escalated whereappropriate.
• Support risk assessment activities and the tracking of risk treatment actions.

Policy, Training & Documentation

• Support the review, maintenance and communication of policies,proceduresand compliance documentation.
• Coordinate policy awareness activities, trainingrecordsand evidence collection.
• Promote the use of the company's Source platform as thesingle sourceof truth for policies,proceduresand compliance records.

Health & Safety, Facilities & Fleet

• Maintain records of health and safety inspections, training, risk assessments and incident reporting activities.
• Support scheduled compliance checks, including DSE, COSHH, fire safety and security-related activities.
• Support facilities administration, office coordination and fleet management activities.

Collaboration & Culture

• Promote a culture of compliance, information security, riskawarenessand continual improvement across the organisation.
• Build effective working relationships across departments and support the delivery of teamobjectives.

Supporting the operational execution of ESG initiatives

• Support the delivery and reporting of ESG commitments, includingEcoVadis,FuturePlusand B-Corp.

This list is not exhaustive and may be amended from time to time. The role holder maybe requiredto carry out other reasonable duties consistent with the nature and level of the role.

Experience -Essential

• Experience in a compliance, audit, governance,riskor information security role.
• Familiarity with management systems and assurance frameworks, such as ISO 27001, ISO 27701, ISO9001and ISO 14001.
• Experience supporting audits, compliance reviews, duediligenceor assurance activities.
• Experiencemaintainingrecords, evidence,registersand documentation to a high standard.
• Strong working knowledge of Microsoft 365 applications, including Word, Excel,Outlookand SharePoint.

Experience -Desirable

• Experience supporting data protection or business continuity activities.
• Experience supporting supplier due diligence, third-partyassuranceor risk management activities.
• Experience working within regulated, audited or certification-based environments.

Desirable Qualifications

• ISO Internal Auditor qualification.
• NEBOSH or IOSH certification.
• IAPP CIPP/E or another data protection qualification.
• Business continuity, risk management or information security qualification.
• Cyber Essentials Assessor, ISO 27001 or similar information security training.

Key Attributes

• Organised and able to manage multiple competing priorities.
• Strong interpersonal and communication skills.
• Strong attention to detail and evidence management skills.
• Proactive, with a positive and collaborative approach.
• Committed to continuous learning and professional development.
• Confidence to challenge non-compliance appropriately.
• Strong written communication skills.
• Ability to influence and build relationships across departments.
• Proactive approach to identifying and resolving issues.

Package:

• Starting salary £37,000
• Hours(36.15) Monday-Friday between 9am-5pm
• ContractPermanent
• LocationSelsey, West Sussex
• Target is anEmployee Ownership trust- you will become a beneficiary after 12 months employment
• Dividends eligible after 12 months service (subject to business performance)
• Supportive & friendly team to help you develop in the role
• 50% contribution towards nursery fees
• 25% gym discount at Thrive gym
• WPA Healthcare
• Auto enrollment pension
• Growing business with opportunity for career progression
• Two Company paid volunteer days per year
• Employee Assistance Program
• Perkbox employee discount scheme
• Company paid social events throughout the year
• Birthday, work anniversary and Christmas gift voucher

A bit about Target Professional Services

Target Professional Services are market leading global tracing and data verification specialists. We have provided innovative services to the pension and finance sector for over 35 years. We became an Employee Ownership Trust (EOT) in 2022.

Our company values

Respect, Passion, Integrity, Innovationunderpin everything we do. Our culture is supportive and friendly.

Our Vision

- "Everyone connected to their pensions and savings.Securely,confidently,globally"

Our Mission

- "By applying a unique blend of technology and customer focus, we provide agile solutions that deliver accurate data to the pensions and savings sector globally"