Governance & Assurance Manager

Sfg20

1d•Hybrid

About The Position

SFG20 is the industry standard for building maintenance, providing services and pioneering technologies that empower people to create and sustain safer buildings. Our mission is to make buildings better using our standard, software and expertise. Our vision is to become the leading authority for built environment maintenance that protects and enhances quality of life. The Governance & Assurance Manager will establish, own and continually improve SFG20's governance and compliance framework, supporting enterprise growth, customer assurance and regulatory obligations. The role will act as the central point of contact for customer due diligence, information governance and ISO management, ensuring SFG20 maintains the governance capability expected by enterprise and public sector customers while delivering and maintaining ISO 9001 and ISO 27001 certification following separation from BESA. This is a new role, providing the opportunity to build governance capability from the ground up.

Requirements

Experience managing ISO 9001 and/or ISO 27001.
Experience responding to customer security questionnaires or vendor assessments.
Experience developing governance frameworks and policies.
Strong project management skills.
Excellent written communication.
Ability to influence stakeholders across all levels.
Strong organisational skills.
Comfortable interpreting technical information for non-technical audiences.

Nice To Haves

ISO 9001 Lead Implementer or Internal Auditor
ISO 27001 Lead Implementer or Internal Auditor
Knowledge of Cyber Essentials Plus
Knowledge of GDPR
Experience with Loopio or similar proposal management software.
Experience within SaaS, technology or enterprise software.
Experience working with public sector customers.

Responsibilities

Own the end-to-end management of customer assurance activities including: Vendor Risk Assessments (VRAs), Security questionnaires, Customer due diligence, Compliance responses for bids and tenders.
Coordinate responses across internal functions, ensuring responses are accurate, consistent and delivered within customer deadlines.
Maintain and continually improve the customer assurance knowledge base.
Lead the implementation, certification and ongoing maintenance of: ISO 9001, ISO 27001, Cyber Essentials/Cyber Essentials Plus.
Coordinate compliance activities across the business.
Support supplier assurance activities.
Maintain governance evidence and audit records.
Ensure regulatory and contractual obligations are met.
Support customer and external audits.
Own governance policies, procedures and document control.
Monitor compliance activities and produce management reporting.
Promote good governance across the organisation.
Compliance and internal processes for Data Protection.