Description Leads industry standards certification activities, ensuring certification is maintained, audit activities are carried out as required and instances of non-conformance / non-compliance are addressed promptly and within agreed timescales. The role plays an important part in supporting the Divisional Risk Team to provide effective business partnering to Sector and Divisional level leadership teams including risk decision making at all business levels across multiple risk perspectives. Click the link for the job description, responsibilities, and qualifications - RISE01- Senior Risk and Assurance Lead.pdf Responsibilities Key Responsibilities Responsible for ensuring the business maintains the following certifications: ISO 9001, 45001, 14001, 44001, TickITPlus, 27001, 22301, 20000-1, PAS 2080 Leads industry standards certification activities, working with external providers (for example BSI) to plan and facilitate reviews with business units, contracts and offices / sites Supports business units, functions, contracts and offices in preparing for ISO audits and ensures any identified compliance gaps are addressed promptly and within agreed timeframes Maintains integrated audit plan, ensuring deconfliction with other assurance / audit activities (for example Internal Audit reviews) and timely communication of planned audits with Contract teams / offices Coordinates functional input / support to ISO audits (including SHE and IT) Conducts assurance reviews of bids’ and contracts’ adherence to Costain Way requirements, working with teams to review evidence, develop findings and agree rectification actions and timescales Performs annual ISO9001 internal audit of business processes and operations Collates compliance evidence as part of submission to external audit partners Prepares reports (for example of assurance reviews, audit progress, compliance status) to aid management in identifying improvements and interventions necessary, sharing findings and best practice and escalating urgent issues where necessary. Knowledge, Skills, and Experience Essential Quality Management System experience and comprehensive understanding of ISO 9001 and associated requirements Understanding of core business processes and controls (lifecycle governance, finance, business planning, risk management, health and safety, quality management) Good communication and collaboration / team working skills Proficient in writing clear, concise reports which collate data, highlight key findings and recommended actions Proficient in use of Microsoft office suite, Adobe Acrobat, Visio and management system applications. Familiarity with UK infrastructure sector and common sector risks and compliance issues Behavioural Attributes Good communication skills with ability to present and explain complex information to a diverse audience. Able to work with a range of stakeholders and secure buy in and participation / engagement Excellent organisational and team working skills, proactive in working with and supporting others to achieve team goals Good problem-solving skills and ability to identify, develop and implement solutions to meet business needs / objectives Promotes good practice (e.g. compliance with process and controls), and is able to persuade others of the ‘why’, using negotiating skills and pragmatism to find a way through obstacles Desirable Internal Audit experience Experience of developing and/or improving controls (including non-financial controls) Understanding of UK corporate governance and assurance requirements, and market providers Understanding of enterprise risk management Able to hold UK security clearance Qualifications Essential Essential ISO 9001 Lead auditor certification (CQI IRCA) Desirable Desirable Certified Internal Auditor (IIA) Prince II or APM PMQ Six Sigma Green belt