Compliance and Risk Officer

The Compliance & Risk Officer supports the effective operation of Bamboo Connect's Governance, Risk and Compliance (GRC) framework, ensuring governance controls, risk processes, compliance, and regulatory requirements are consistently embedded across the organisation. This is a hands-on and dynamic role that will provide operational support for conducting risk assessments, internal audits, incident reporting and ongoing compliance readiness, helping the business remain resilient, audit-ready, and aligned with internal and external obligations.

Role Summary

The postholder will ensure compliance processes run effectively and that risk awareness is embedded across all business units. Working closely with the Compliance & Sustainability Manager and the General Manager, the officer will support enterprise risk management, maintain risk and compliance registers, and manage evidence repositories within our GRC platform, Hyper proof. The role also includes coordinating policy reviews and supporting client and certification audits (ISO 9001, ISO 14001, ISO 27001, Cyber Essentials Plus, and relevant industry frameworks such as TAPA and DORA).

The role also provides cross-functional support for Health & Safety and data protection compliance, supplier due diligence, and operational incident management.

Key Responsibilities

Governance & GRC Administration

• Support and administer the Governance, Risk & Compliance (GRC) framework across the organisation.
• Maintain governance documentation, evidence repositories and controlled document logs in line with Bamboo's internal standards.
• Manage the compliance calendar, including policy reviews, internal audit cycles, supplier reviews, and governance checkpoints.

Risk Management

• Maintain the Enterprise Risk Register and coordinate quarterly risk reviews with risk owners.
• Support risk identification, scoring and mitigation planning across all business units.
• Assist with operational risk assessments (resilience, continuity, third-party dependence), and support with other areas of risk including, but not limited to compliance risk, ESG risk, ICT risk etc.
• Monitor emerging risks and escalate concerns to the Compliance & Sustainability Manager.

Policy, Procedure & Document Governance

• Support the development, writing, review, and implementation of policies, procedures, risk and control documents.
• Ensure all documents follow Bamboo's Governance Table, version control, and classification standards.
• Track annual review cycles and maintain an accurate policy and procedures repository.

Internal Audit & External Assurance

• Support preparation for certification and client audits (ISO 9001, ISO 14001, ISO 27001, CE+, TAPA, insurance partner audits).
• Help gather and maintain audit evidence and ensure Bamboo is audit-ready at all times.
• Assist in conducting internal audits and following up on corrective actions.

Health & Safety

• Oversee day-to-day Health & Safety operations, ensuring policies, procedures, and risk controls are effectively implemented across all sites.
• Monitor H&S performance, maintain incident and inspection records, and support continuous improvement of the organisation's safety management system.
• Coordinate H&S training, toolbox talks, and compliance checks, ensuring staff awareness and adherence to statutory requirements.

Data Protection & Information Security

• Provide day-to-day operational support for UK GDPR compliance under the direction of the General Manager (Data Protection Lead).

Third-Party / Supplier Compliance

• Conduct supplier due diligence checks and maintain the supplier risk register.
• Support ESG and sustainability-related supplier assessments (e.g., waste, recycling, carbon impact).
• Coordinate annual supplier recertification, ensuring suppliers meet Bamboo and client-specific authorised supplier list requirements.

Incident Management

• Maintain the Incident Register and support incident investigations (security, data, operational, safety, environmental).
• Assist with root-cause analysis, lessons learned, and corrective action tracking.
• Ensure affected units/devices are handled in accordance with chain-of-custody, immobilisation, and TAPA requirements.

Training & Awareness

• Help develop and deliver internal compliance training (policies, GDPR, risk awareness, incident reporting)
• Promote a culture of risk awareness and continuous improvement across all departments.

Reporting

• Produce regular KPI reports, dashboards, and summaries for leadership and governance committees.
• Prepare briefing notes for senior management on governance effectiveness, risk status, and audit outcomes.

Person specification

Qualifications

Essential

• Experience working in a Risk Management role
• Degree (or equivalent qualification/
  experience
  ) in Law, Business, Risk Management, Compliance, or related discipline.
• Professional certification in compliance, governance, or risk (e.g. ICA, IRM).

Desirable

• Experience with risk management tools (Hyper proof, Audit Board, Archer, MetricStream)
• IOSH Managing Safely or other H&S-related training.
• Training or qualifications in audit or project management (e.g. PRINCE2, IIA, CISA, ISO Lead Implementer).

Familiarity with ISO management standards (e.g. ISO 27001, ISO 9001, ISO Knowledge & Experience

Essential

• Demonstrable experience managing or maintaining a governance, risk, or compliance framework.
• Understanding of risk assessment methods and mitigation planning.
• Experience collaborating cross-functionally to support risk mitigation and policy adherence.
• Proven track record in writing, implementing, or updating corporate policies and procedures.
• Experience in conducting or supporting internal audit and client assurance processes.

Desirable

• Experience working with external legal or regulatory advisors.
• Experience working in an insurance/ electronics-related industry.
• Familiarity with ISO frameworks (9001, 14001, or Cyber Essentials Plus.
• Experience with Health & Safety, in a support role.

Skills & Competencies

• Strong understanding of governance, compliance, and enterprise risk management.
• Ability to translate regulatory and risk concepts into practical application across business functions.
• Excellent written and verbal communication skills, with the ability to influence and engage stakeholders at all levels.
• Strong attention to detail, with excellent organisational and documentation skills.
• Analytical thinking with problem-solving capabilities and the ability to manage multiple priorities.
• Proficient in using compliance tools, risk registers, and document control systems.
• Proficient in Microsoft Office Suite

Additional Requirements

• Maintain confidentiality at all times, especially in relation to security, operational incidents, and data protection matters.
• Uphold Bamboo Connect's values, sustainability commitments, and security responsibilities.

Our Values

• Attaining a competitive advantage, enhancing value, and driving service excellence, through INNOVATION and idea generation
• Allowing TRUST to thrive in a climate of open communication, transparency, commitment, accountability and care
• We treat employees, clients, customers, suppliers, stakeholders, position, opinions, and the environment with total RESPECT
• Operating as a cohesive team, where COLLABORATION offers the greatest sense of achievement and success
• Encourage curiosity, and the acquiring of intelligence to support organisational effectiveness through KNOWLEDGE SHARING