Group Governance and Risk Manager

WPA (Welsh Procurement Alliance); Days Creek (OR); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Discretionary bonus

Wellbeing allowance

34 days holiday

Private Medical Insurance

Maternity/Paternity pay

Training budget

Pension arrangements

Volunteering leave

Job summary

LHCPG is seeking a Group Governance and Risk Manager to own governance delivery, advise the Board, and embed practical risk frameworks across our multi-site operation. You will act as DPO and lead on GDPR, compliance, and policy management, ensuring clear decisions and robust assurance.

You\'ll line-manage one report and collaborate with senior leaders to balance pragmatism with rigour in a fast-moving procurement environment, shaping governance that actually gets used.

Qualifications

• Experience in a governance function advising Boards and Committees.
• Track record building and embedding governance frameworks.
• Knowledge of GDPR and data protection practices is essential.

Responsibilities

• Provide authoritative governance and risk advice to the Board and SLT.
• Maintain governance records, policies, and assurance processes.
• Line-manage one direct report and coordinate with external advisers.
• Act as Data Protection Officer for UK GDPR compliance and DPIA processes.
• Embed risk ownership across multi-site operations.

Skills

Governance

Risk management

Data protection

Board communication

Strategic thinking

Education

Governance qualification

Tools

MS Office

Job description

At LHCPG, good governance isn't box-ticking — it's how we keep our promises to the communities we serve. We're looking for a Group Governance and Risk Manager to take real ownership of that: someone who can give the Board and Senior Leadership Team clear, practical advice, and who genuinely enjoys improving the way things work.

This is a broad, hands-on remit with plenty of room to shape it. You'll be the person the organisation turns to when it needs to make well-informed decisions, stay on the right side of statutory and regulatory requirements, and manage risk sensibly rather than defensively. If you like the idea of building frameworks that people actually use — not ones that sit in a drawer — this role will suit you.

What You'll Be Doing

• Giving the Board and senior leaders authoritative, practical governance advice — from how decisions get made through to how they get delivered
• Supporting Board development: induction, engagement, succession planning and performance reviews
• Keeping governance records accurate and current, including conflicts of interest, tenure, appointments and decision trails
• Managing our relationships with external governance and legal advisers
• Embedding a clear, workable approach to risk so every team across our multi-site operation knows what they're responsible for
• Owning the corporate governance policy suite and the processes behind strong audit and assurance oversight
• Acting as our Data Protection Officer — maintaining UK GDPR compliance, ROPA and DPIA processes, and our IT, digital and security policies
• Being the go-to contact for any privacy enquiries

You'll also line-manage one direct report.

What We’re Looking For

You'll be an established governance professional who's comfortable operating alongside senior stakeholders while keeping your independence, discretion and sound judgement intact. Ideally you've built your experience in a fast-moving, commercial environment and can adapt good governance models to a customer-focused service provider — we work in a competitive procurement sector, so pragmatism matters as much as rigour.

Experience within a proactive Company Secretariat or Governance function is essential, along with a genuine track record of being a trusted adviser to Boards and Committees. Knowledge of the not-for-profit and charity sector would be a real plus.

We’d Also Love To See

• A recognised governance qualification
• Strong IT skills, including confident use of the MS Office suite
• Solid Board and committee skills — preparing papers, reports, minutes and decision records
• A history of designing and embedding agile governance and assurance frameworks that stick
• Experience leading the full internal audit cycle and using assurance to strengthen performance
• A track record of leading risk management frameworks and maintaining risk registers
• The ability to manage organisation-wide policies and business systems
• DPO experience, with sound knowledge of UK GDPR and the Data Protection Act 2018
• Strategic thinking and the judgement to lead through complexity and ambiguity
• Excellent organisation skills and the ability to juggle competing priorities at senior level

(Full details are in the attached job description and person specification.)

What You’ll Get

• Competitive salary, dependent on experience
• Discretionary annual bonus
• £300 annual wellbeing allowance (via a portal, taxable)
• 34 days' holiday plus bank holidays — with the option to buy more, and your birthday off
• Private Medical Insurance and Health Cash Plan after probation (taxable)
• Enhanced maternity and paternity pay (after one year's service)
• 10 days a year to 'work from anywhere'
• 1.5 days' personal volunteering leave, plus team volunteering opportunities
• £1,000 a year individual training budget for your professional development
• Generous pension arrangements