Risk and Compliance Manager

We have an opportunity for an experienced, hands-on Risk and Compliance Manager to join our business as we continue to scale.

In this role, you will lead the implementation and ongoing management of ENODA's Enterprise Risk Management (ERM) framework and corporate compliance arrangements, helping the business identify, manage and respond effectively to risks as we grow.

Working across departments, you will strengthen risk and compliance processes, oversee the use of Vanta as our Governance, Risk and Compliance (GRC) platform, and provide meaningful reporting to support management decisions.

This is an opportunity for someone who enjoys combining hands-on delivery with stakeholder engagement and people management. You will also line-manage assigned team members, including the QMS System Administrator function, supporting their development and continuous improvement across ENODA.

Position Objectives & Areas of Responsibility:

• Leading the implementation, operation and continual improvement of ENODA's Enterprise Risk Management framework.
• Developing and maintaining risk assessment methodologies, risk registers, treatment plans and review processes, working closely with departmental risk owners.
• Supporting the development of risk appetite, tolerance levels and escalation thresholds for leadership approval.
• Developing Key Risk Indicators (KRIs), risk dashboards and reporting to identify emerging risks, monitor trends and support informed decisions.
• Working with Engineering, Manufacturing, Operations, IT & Security and other departments to embed effective risk management into business activities and projects.
• Coordinating supplier, third-party and specialist risk assessments with relevant departments, ensuring appropriate monitoring and escalation.
• Maintaining corporate compliance arrangements, including obligations registers, policy requirements, monitoring activities and supporting evidence.
• Coordinating corporate policy reviews, employee attestations and compliance checks, identifying control weaknesses and monitoring corrective actions.
• Managing and developing the use of Vanta as ENODA's GRC platform, including risk and control records, evidence management, compliance workflows and action tracking.
• Preparing clear risk and compliance reports for senior leadership, Management Review and relevant governance forums.
• Supporting risk awareness and compliance capability across the organisation through practical guidance, workshops and stakeholder engagement.
• Providing line management to assigned team members, including the QMS System Administrator function, setting objectives, managing performance and supporting development.
• Working collaboratively with Legal, Internal Audit, Quality, IT & Security, Health & Safety and other specialist functions to promote effective risk management, compliance and continuous improvement.

• Demonstrable experience implementing and managing enterprise or operational risk processes within a technology, engineering, manufacturing or similarly complex environment.
• Practical working knowledge of ISO 31000, with experience implementing and operating an effective risk management framework.
• Experience developing and maintaining corporate compliance processes, including obligations tracking, policy management, monitoring and corrective actions.
• Practical experience using GRC platforms or comparable risk and compliance management systems.
• Strong analytical skills, including risk assessments, KRIs, dashboards and management reporting.
• Experience directly managing and developing staff alongside hands-on operational responsibilities.
• Ability to influence senior leaders, engage stakeholders and provide constructive challenge.
• Strong organisational, communication and problem-solving skills, with sound judgement and attention to detail.

The following would be advantageous:

• Professional risk or compliance qualifications, such as IRM, PRM, CRISC or equivalent.
• Experience using Vanta or a comparable GRC platform.
• Exposure to ISO 27001, third-party risk management or corporate assurance activities.
• Experience in a growing technology, engineering or manufacturing organisation.
• Experience supporting organisational change, process improvement or implementation of management frameworks.

• Highly competitive salary: £70K - £80K
• Private Medical Insurance
• Enhanced Parental Leave
• Flexible Pension policy tailored to your requirements
• 33 days annual leave + Holiday purchase/sell scheme
• Dental cash-back scheme
• Cycle-to-Work scheme
• Season travel ticket loan
• Enhanced company sick pay & Income Protection
• Life Assurance