Risk Management & Compliance Manager

What you will do

Enterprise Risk Management Own organisation-wide Risk Register (RISK Matrix) with clear mitigation deadlines & owners. Implement proactive RAID Logs for Delivery & Support teams. Conduct periodic risk review meetings with functions (Delivery, P&C, CRM, Finance, Legal, InfoSec).

Compliance Monitoring & Control Govern adherence to ISO 27001 controls, privacy regulations, NDA terms, and client compliance requirements. Align delivery governance to CMMI L5 practices (metrics, audits, improvements). Coordinate internal audits & readiness for external audits (ISO, client assessments, security reviews).

Policy & Process Oversight Ensure organisation-wide compliance with: Data handling & InfoSec policies Vendor onboarding & background checks Access controls & offboarding Delivery governance policies (PMO, Change Control, Defect Handling, Documentation Standards)

Incident & Breach Management Own the Incident Reporting & RCA Framework with closure timelines and preventive actions. Act as escalation SPOC for process violations, access breaches, commercial deviations, or regulatory risk.

Reporting & Governance Dashboard Publish monthly Compliance & Risk Dashboard to EXCO with status: Red/Amber/Green. Track slippages and push corrective actions with leadership sign-off.

Support Sales & Delivery with compliance inputs for RFPs, SoWs, Contracts, Security Responses, QBRs. Participate in client audits and governance reviews as compliance representative

• Own organisation-wide Risk Register (RISK Matrix) with clear mitigation deadlines & owners.
• Implement proactive RAID Logs for Delivery & Support teams.
• Conduct periodic risk review meetings with functions (Delivery, P&C, CRM, Finance, Legal, InfoSec).
• Govern adherence to ISO 27001 controls, privacy regulations, NDA terms, and client compliance requirements.
• Align delivery governance to CMMI L5 practices (metrics, audits, improvements).
• Coordinate internal audits & readiness for external audits (ISO, client assessments, security reviews).