Job Introduction Bamboo Connect Limited, are a leading provider in the Mobile Insurance Industry, offering cost effective device replacement solution, at pace, meeting the customer demand to remain connected. Through market leading technologies and data led strategies, we’re setting the gold standard in both device management and client services, driven by innovation and environmental responsibility.
Responsibilities
* Support and administer the Governance, Risk & Compliance (GRC) framework across the organisation. Manage the compliance calendar, including policy reviews, internal audit cycles, supplier reviews, and governance checkpoints.
* Maintain the Enterprise Risk Register and coordinate quarterly risk reviews with risk owners. Support risk identification, scoring and mitigation planning across all business units. Assist with operational risk assessments (resilience, continuity, third‑party dependence), and support with other areas of risk including, but not limited to compliance risk, ESG risk, ICT risk etc. Monitor emerging risks and elevate concerns to the Compliance & Sustainability Manager.
* Support the development, writing, review, and implementation of policies, procedures, risk and control documents. Track annual review cycles and maintain an accurate policy and procedures repository. Help gather and maintain audit evidence and ensure Bamboo is audit‑ready at all times.
* Oversee day‑to‑day Health & Safety operations, ensuring policies, procedures, and risk controls are effectively implemented across all sites. Monitor H&S performance, maintain incident and inspection records, and support continuous improvement of the organisation's safety management system. Coordinate H&S training, toolbox talks, and compliance checks, ensuring staff awareness and adherence to statutory requirements.
* Provide day‑to‑day operational support for UK GDPR compliance under the direction of the General Manager (Data Protection Lead).
* Conduct supplier due diligence checks and maintain the supplier risk register. Maintain the Incident Register and support incident investigations (security, data, operational, safety, environmental). Assist with root‑cause analysis, lessons learned, and corrective action tracking. Ensure affected units/devices are handled in accordance with chain‑of‑custody, immobilisation, and TAPA requirements.
* Help develop and deliver internal compliance training (policies, GDPR, risk awareness, incident reporting). Promote a culture of risk awareness and continuous improvement across all departments. Prepare briefing notes for senior management on governance effectiveness, risk status, and audit outcomes.
Qualifications and Experience
* Experience working in a Risk Management role.
* Degree (or equivalent qualification/experience) in Law, Business, Risk Management, Compliance, or related discipline.
* Professional certification in compliance, governance, or risk (e.g. Experience with a risk management tools (Hyperproof, AuditBoard, Archer, MetricsStream) IOSH Managing Safely or other H&S‑related training.
* Training or qualifications in audit or project management (e.g. Demonstrable experience managing or maintaining a governance, risk, or compliance framework.
* Understanding of risk assessment methods and mitigation planning.
* Experience collaborating cross‑functionally to support risk mitigation and policy adherence.
* Proven track record in writing, implementing, or updating corporate policies and procedures.
* Experience working with external legal or regulatory advisors.
* Strong understanding of governance, compliance, and enterprise risk management.
* Ability to translate regulatory and risk concepts into practical application across business functions.
* Proficient in using compliance tools, risk registers, and document control systems.
* Proficient in Microsoft Office Suite.
* Maintain confidentiality at all times, especially in relation to security, operational incidents, and data protection matters.
* Encourage curiosity, and the acquiring of intelligence to support organisational effectiveness through KNOWLEDGE SHARING.
#J-18808-Ljbffr