Description
Our client seeks an experienced Compliance Manager to implement, manage and control appropriate initiatives to ensure the UK Group’s compliance and governance in key areas of risk and compliance. Responsibilities include, but are not limited to : Data Protection, Business Continuity Risk and Planning, Bribery & Corruption, PCI, DSS, Corporate Criminal Offences and Risk Mapping exercises for HQ. The role will ensure the UK group operates in a legal and ethical manner whilst ensuring business / commercial goals and objectives are met including the key priorities of the Group risk functions.
The role is vital to developing and improving compliance in the UK and in implementing Group requirements under SAPIN / anti-corruption risk mapping. This will involve compliance that needs dedicated resource to build on / reshape / improve and implement with support from Group / HR / Learning and Comms teams. This includes ABAC, ML, DP / GDPR, Tax Evasion, Food Safety support, BCR, Modern Slavery, Corporate Criminal Offences and more sophisticated risk mapping / reporting to the Board. The CO will need to look at developing current e-learning and planning new training / clinics and rolling out updates / horizon scanning to the business. The role will involve managing and implementing initiatives to ensure Compliance is embedded into the UK business.
Key Accountabilities include :
- Compliance framework - Develop and implement an effective legal compliance program covering all areas of business regulatory, compliance and governance risk. To include a new risk and compliance framework and to manage and arrange RAC meetings. Risk mapping and scoring for the UK (to complement the Group’s requirements) as directed by the RAC. Ongoing Risk register mapping, scoring, and ongoing maintenance and updating.
- Risk & Audit Committee – lead role overseeing the RAC, putting together the packs, preparing the agenda and required documentation, presenting on various items to the RAC, assisting the chairperson and presenting some of the items for each RAC, minuting the meetings and tracking Actions and ensuring Actions are completed.
- Business Lead - Collaborate with internal stakeholders, including Group IT Compliance and Support Managers on risk and compliance issues acting as the business lead on all risk and compliance issues.
- Regulatory / enforcement - Supporting the business on meeting regulatory / statutory requests, subject access requests / ICO notices or requests / EHGO investigations or prosecutions / ISO audit requirements. Lead role / support on any EHO, ICO and other regulatory investigations, enforcement actions, demands, notices and any prosecutions. Liaising with and supporting internal teams safety and wellbeing and external advisers where appropriate.
- Horizon scanning - Stay ahead and plan for new legislation, best practice and industry standards introducing new policies and procedures to ensure on-going compliance. Report into the LT and RAC in each regular report. Track and advice on risks associated with new laws and advice / support on implementation to meet new laws / regulatory requirements.
- Cyber / GPDR - Supporting IT / Cyber security teams on cyber and GDPR related issues : Data Mapping to support the above and advising the business of GCPR queries, client related data protection issues and requests. Supporting teams on GDPR related issues and queries including advising on privacy terms, processing issues and privacy policies.
- Controls / Monitoring - Create sound internal controls and monitoring adherence to them, presenting key areas of risk to the Head of Legal and UK Board.
- Policies – Draft / update and revise appropriate Company policies, proactively auditing processes, practices and documents to identify weaknesses and business exposure.
- Evaluation - Evaluate all business activities to assess compliance risks, making recommendations for better compliance.
- Compliance management - Set plans to manage compliance issues and to escalate areas of concern (including food safety issues / risks and incidents).
- Training - Educate and train colleagues on regulations and best practice at the required frequency (including annual ABAC / GCPR and any other required annual training as dictated by the RAC).
- Miscellaneous - Address both manager and colleague’s concerns or questions reference best practice and compliance.
- Site visits - (where required) to assess best practice and risk stadia (alcohol sales, licensing, and regulatory requirements).
- Audits – supporting internally on annual audits and internal audit requests (where required).
What we seek :
Experienced compliance professionalProven experience dealing with general compliance at a senior levelExperience working in the private (non-financial services) sector in the UKConfident handling data protection risk managementAbility to presenting to senior leadership on areas such as risks (including running and presenting a UK risk committee)Preferably some experience of the food / beverages industryAdditional experience in licensing ( alcohol) and dealing with EHO challenges / enforcement action in this industry would be a benefit but not essentialAbility to work in Cheshire 2-3 days a weekApply :
If you are interested in this Compliance Managerposition,