RemoteRemote working is permitted only from within the UK.
Risk & ComplianceRegulatory Compliance & Ethics
About the job
Requirements
Demonstrable experience in governance, compliance, risk, assurance, auditing, or closely related roles.
Practical experience supporting or maintaining one or more ISO-certified management systems.
A good understanding of governance, risk, and compliance principles, including practical risk management.
Ability to apply a pragmatic and proportionate approach to governance and compliance, balancing requirements and best practice with the practical realities, resources, and risk profile of a growing organisation.
Experience maintaining policies, processes, registers, or other controlled documentation.
Experience conducting or supporting internal audits, compliance reviews, or other assurance activities.
Strong verbal and written communication skills, with the ability to tailor communications to different audiences.
Ability to manage multiple activities and deadlines, engage effectively with stakeholders, and ensure others follow through on agreed actions.
Experience interpreting compliance requirements and translating them into practical actions for the business.
Confidence using digital tools and systems, quickly learning new technology and using it effectively; Jira and Confluence are currently used for work planning, knowledge sharing, and collaboration.
Ability to work effectively remotely and in a flexible, agile environment.
Remote working is permitted only from within the UK.
Eligibility for BPSS, SC, or DV clearance, including meeting the UK Government residency and right-to-work requirements associated with the required level of clearance.
Responsibilities
Own the day-to-day operation, maintenance, and continuous improvement of the organisation’s governance and compliance activities, including ISO-certified management systems.
Plan and conduct internal audits and other assurance activities.
Lead the coordination of external certification audits and compliance assessments, including those relating to ISO-certified management systems.
Ensure appropriate records and evidence demonstrate compliance, identify gaps, and drive corrective actions where needed.
Produce clear, meaningful compliance reports for senior leadership.
Coordinate and collaborate with stakeholders across the organisation to manage risks effectively, share requirements, gather information, coordinate governance and compliance activities, and drive agreed actions through to completion.
With support from subject matter experts, maintain an overview of existing and emerging regulatory, contractual, and industry requirements, and help coordinate the organisation’s response to necessary changes.
Act as a trusted point of contact for GRC across the business, providing practical advice and guidance and helping teams understand applicable requirements.
Identify opportunities to strengthen or simplify the organisation’s GRC approach, and take ownership of improvements through implementation.
Desired Qualifications
Practical experience supporting or maintaining ISO 9001.
Experience coordinating surveillance, recertification, or certification audits for ISO-certified management systems.
Experience supporting compliance with UK government commercial or contractual requirements.
Internal auditor training.
Delivery or project management experience and training.
Experience developing compliance reports, metrics, or dashboards.
Proficiency with the Atlassian suite, particularly Jira.
About Us
In 2019, the founders were working as engineers solving complex cross-domain problems within government organisations.
TwinStream was formed to bring together their collective expertise and experience into a single business, focused on delivering technical excellence and high-quality service to clients.
Since then, the company has grown to over 100 team members across the UK, with colleagues working both on-site with clients, hybrid and remotely from home.
Details:
Salary: £40,000 - £55,000 DOE / Part-time, 3 days a week.
Location: Fully remote
About the role
As our Governance, Risk and Compliance (GRC) professional, you’ll take ownership of core GRC activities and play a leading role in shaping and improving our approach to governance, risk and compliance across the business.
You’ll work closely with teams across the organisation to help them understand, meet and demonstrate compliance requirements in a practical and proportionate way. Our compliance landscape is varied, covering UK legislation and regulation, UK government commercial and contractual requirements, MOD security standards, Cyber Essentials Plus, ISO 27001, ISO 9001, ISO 20000-1 and ISO 14001.
Working alongside an experienced Information Security Manager, who will provide specialist cyber security expertise, and other business leads, you’ll bring the GRC knowledge and perspective needed to ensure we meet our obligations, manage risk effectively and maintain clear evidence of compliance for internal and external stakeholders.
Responsibilities
Own the day-to-day operation, maintenance and continuous improvement of the organisation’s governance and compliance activities, including ISO-certified management systems.
Plan and conduct internal audits and other assurance activities.
Lead the coordination of external certification audits and compliance assessments, including those relating to ISO-certified management systems.
Ensure the appropriate records and evidence are in place to demonstrate compliance, identifying gaps and driving corrective actions where needed.
Produce clear, meaningful compliance reports for senior leadership.
Coordinate and collaborate with stakeholders across the organisation to ensure risks are managed effectively, share requirements, gather information, coordinate governance and compliance activities, and drive agreed actions through to completion.
With support from subject matter experts, maintain an overview of existing and emerging regulatory, contractual and industry requirements, helping to coordinate the organisation’s response where changes are needed.
Act as a trusted point of contact for GRC across the business, providing practical advice and guidance and helping teams understand what requirements mean for them.
Proactively identify opportunities to strengthen or simplify the organisation’s GRC approach, bringing forward ideas and taking ownership of improvements through to implementation.
Key Skills
Demonstrable experience in governance, compliance, risk, assurance, auditing or closely related roles.
Practical experience supporting or maintaining one or more ISO-certified management systems.
A good understanding of governance, risk and compliance principles, including practical risk management.
Ability to apply a pragmatic and proportionate approach to governance and compliance, balancing requirements and best practice with the practical realities, resources and risk profile of a growing organisation.
Experience maintaining policies, processes, registers or other controlled documentation.
Experience conducting or supporting internal audits, compliance reviews or other assurance activities.
Strong verbal and written communication skills, with the ability to tailor communications to different audiences.
Highly organised and proactive, with the ability to manage multiple activities and deadlines, engage effectively with stakeholders, and ensure others follow through on agreed actions.
Experience interpreting compliance requirements and translating them into practical actions for the business.
Confidence using a range of digital tools and systems, with the ability to quickly get to grips with new technology and find effective ways to use it in your work. We currently use Jira and Confluence for work planning, knowledge sharing and collaboration.
Ability to work effectively remotely and in a flexible, agile environment. Please note that remote working is only permitted from within the UK.
Desirable Skills
Practical experience supporting or maintaining ISO 9001.
Experience coordinating surveillance, recertification or certification audits for ISO-certified management systems.
Experience supporting compliance with UK government commercial or contractual requirements.
Internal auditor training.
Delivery or project management experience and training.
Experience developing compliance reports, metrics or dashboards.
Proficiency with the Atlassian suite, particularly Jira.
There are many great reasons to join our team!
Pension Plan
Secure your future with our competitive pension plan that offers an 8% employer contribution.
Private Medical Healthcare
Your health and well-being are our top priorities. Enjoy comprehensive private medical healthcare, which includes dental and optical care for you and your family.
Learning and Development
Your career is in your hands. We empower you to take charge of your own development, giving you the autonomy to shape your growth.
Flexible Working
We understand the importance of balancing work and life. Flexibility is not just a policy for us; it is part of our culture. We are passionate about helping you seamlessly integrate work with your home life.
Electric Vehicle Scheme
Drive sustainability forward with our electric vehicle leasing scheme. You can take advantage of this initiative through a convenient salary sacrifice program.
Holidays
Enjoy annual leave of 28 days, plus bank holidays, allowing you to recharge and spend time on what matters most.
Team Events
We love celebrating our achievements! In addition to our quarterly meetings, you can look forward to our Christmas and summer parties—opportunities to relax, reflect, and have fun as a team.
Additional Benefits
We provide life assurance for your peace of mind and a cycle-to-work scheme to support your health and sustainability goals.
Diversity & Inclusion
We’re committed to building a diverse and inclusive workplace. We welcome applications from people of all backgrounds, experiences, and identities.
If you need any adjustments during the recruitment process, please let us know. We’re here to support you
Further Information:
Due to the nature of the work and the sectors we support, any offer of employment will be subject to the successful completion of the relevant security screening and clearance process.
This role requires eligibility for [BPSS / SC / DV] clearance. As part of the vetting process, candidates must meet the UK Government's residency and right-to-work requirements associated with the required level of clearance.