Risk & Compliance Manager

We are seeking a dedicated Risk and Compliance Manager to ensure Drivetech operates in full compliance with all relevant laws and regulations, including GDPR, PCI-DSS, and ISO accreditation standards. This role is crucial in maintaining our adherence to internal business policies. As the leader of the compliance function, you will collaborate closely with the Drivetech Operational Support Coordinator and the Head of Risk and Governance - Business Services & Drivetech. Your responsibilities will include managing all compliance activities, overseeing document management systems, maintaining the internal risk register, and handling supplier onboarding and ongoing management processes. Additionally, you will manage customer audit questionnaires and investigate any events, incidents, breaches, or exceptions to policies.,

• ISO Audit Coordination: Organise and host external ISO audits, ensuring all required management system information is presented and SME attendees are briefed.
• PCI-DSS and Internal Audits: Organise and host PCI-DSS audits, collaborating with the AA Assurance Team to plan and organise internal ISO audits.
• Risk Register Management: Maintain and update the company risk register, presenting it to the senior leadership team monthly.
• Compliance Management: Oversee the compliance function to ensure Drivetech meets all compliance obligations.
• Document Management Systems: Create and manage systems for document recording, review, and updates by designated business owners.
• Policy Standards and Business Outcomes: Ensure company policies meet relevant standards and support business operations.
• Monthly Compliance Reporting: Prepare and present monthly compliance reports to the Senior Management team.
• Policy Ownership: Identify and ensure individual owners keep company policies up to date.
• Audit and Incident Management: Record, investigate, and report audit issues, non-conformities, and policy breaches.
• Corrective Actions and Risk Mitigation: Provide guidance on corrective actions and risk mitigation strategies.
• Action Plan Monitoring: Monitor the progress of action plans addressing non-compliance or potential issues.
• Internal Training and Guidance: Coordinate internal training and provide advice on compliance standards, including GDPR.
• Business Continuity Planning: Manage BCPs, including regular reviews, tests, and training arrangements.
  
  ISO Standards Familiarity: Familiarity with ISO standards (9001, 14001, 27001, 39001, 45001).
• PCI-DSS and GDPR Knowledge: Knowledge of PCI-DSS and GDPR, with accreditation and formal training beneficial but not required.
• Senior-Level Risk and Compliance Experience: Extensive experience in risk and compliance at a senior level.
• Organisational Skills: Highly organised with deep experience in managing administrative functions and document management systems.
• Compliance Function Experience: Proven experience in a similar role within a compliance function, familiar with compliance and auditing team operations.
• Diverse Compliance Regimes: Experience in various compliance regimes will be considered if applicable.
• Communication Skills: Excellent communication skills, able to work as a business partner.
• Collaboration Skills: Strong collaboration skills to help people understand and meet their obligations.
• Formal Training and Certification: Formal training and certification in related subjects desirable but not required.
• Administrative Management: Deep experience in managing administrative functions and document management systems.
  
  The AA is one of the UK's most well-known and trusted brands. We provide a range of services to millions of customers, from roadside assistance to insurance and driving lessons. Our mission is to help keep Britain moving, and we're looking for dedicated individuals to join our team. Are you ready to join?
  
  We're always looking to recognise and reward our employees for the work they do. As a valued member of The AA team, you'll have access to a range of benefits including:
• Free AA breakdown membership from day 1, 50% discount for family and friends in the first year plus discounts on other AA products
• 25 days annual leave plus bank holidays + the option to buy additional annual leave
• Dedicated Employee Assistance Programme and a 24/7 remote GP service for you and your family
• Pension scheme available up to 7% contribution
• Access to the EV discount scheme
Plus, so much more! We're an equal opportunities employer and welcome applications from everyone. The AA values diversity and the difference this brings to our culture and our customers. We actively seek people from diverse backgrounds to join us and become part of an inclusive company where you can be yourself, be empowered to be your best and feel like you truly belong. We have five communities to bring together people with shared characteristics and backgrounds and drive positive change. As part of the onboarding process, we complete several pre-employment checks including work reference, credit, and criminal record checks.