Senior Governance and Assurance Manager - #2192856

Senior Governance & Assurance Manager 

Key Responsibilities
The Senior Governance and Assurance Manager provides senior leadership for Reliable's corporate governance, integrated management system, data protection and assurance arrangements. The postholder is also Reliable's formally designated Data Protection Officer and gives the Executive Team a clear and evidence-based view of whether the organisation's key obligations, controls and management systems are suitably designed, consistently applied and producing the intended outcomes.

• Governance framework and executive assurance: Lead a proportionate governance and assurance framework aligned with Reliable's strategy, risks, client commitments and regulatory obligations. Produce a risk-based annual assurance plan and concise Executive reporting on findings, gaps, recurring themes, overdue actions and matters requiring intervention.
• Integrated management system oversight: Act as senior custodian of the Integrated Management System, ensuring ISO 9001, ISO 14001 and ISO 45001 arrangements remain integrated, current and effective. Coordinate management review, certification and improvement planning, and oversee the controlled hierarchy of policies, procedures and records while operational managers retain ownership of controls.
• Risk, obligations and control effectiveness: Support consistent management of enterprise and compliance risk, including escalation thresholds and significant-risk actions. Oversee the allocation of legal, regulatory and contractual obligations, test key controls and evidence, and assess root causes and the effectiveness of corrective action.
• Audit and assurance programme: Lead a risk-based programme of internal audit and assurance, commissioning specialist support where needed and maintaining independence. Coordinate external reviews and certification activity, report findings consistently, and verify closure alongside evidence from incidents, complaints, nonconformities and performance data.
• Regulatory, client and supply-chain assurance: Maintain strategic oversight of relevant rail-sector, RISQS, Sentinel, Constructionline, CHAS and equivalent requirements. Set evidence standards for submissions and supplier governance, challenge incomplete records, and assure that governance and compliance statements are accurate and supportable.
• Data protection, UK GDPR and information governance: Serve independently as Reliable's Data Protection Officer, advising on and monitoring compliance with UK GDPR, the Data Protection Act 2018 and information-rights requirements. Oversee DPIAs, rights requests, records of processing, privacy notices, retention, sharing, processors, training and breaches; report significant concerns to the Executive Team and act as the principal contact for individuals and the Information Commissioner's Office. Business and system owners retain responsibility for lawful day-to-day processing.
• Performance insight and organisational learning: Develop meaningful governance and assurance indicators, test the quality of Executive information and identify trends, root causes and emerging exposure. Translate evidence into practical recommendations, promote learning and simplify controls where duplication or limited value is identified.
• Leadership and influence: Set priorities and professional standards for governance and assurance colleagues, providing coaching and development. Build effective relationships while retaining independent challenge, and support governance forums so decisions, actions and accountabilities are recorded and completed.

Behaviours
All Employees

• Work in the spirit of the Company’s values, goals and contribute to best practice.
• To treat everyone with dignity and respect, where everyone is valued as part of a diverse, inclusive, and supportive culture and a key part in delivering our ED&I Policy.
• Ensure compliance with all Health, Safety & Wellbeing policies, and legal requirements.
• Ensure compliance with the Company policies and procedures.
• Engage in any learning and development activities that are deemed appropriate by your line management.
• Participate and engage fully in Company appraisal / performance review processes and constantly work to improve your individual, team, and the wider Company performance.
• Where applicable: Manage the performance of all employees assigned to you in accordance with legislation and Company policies and procedures.

Qualifications & Training

Required:

• A recognised professional qualification in audit, risk, compliance, quality, health and safety, environmental management, data protection or a related discipline A recognised data-protection practitioner qualification or equivalent evidence of advanced professional development
• Working practical knowledge of UK GDPR and the Data protection Act 2018

Desirable:

• Lead Author or an equivalent advanced management system audit qualification, together with membership of a relevant professional body such as CQI/IRCA, IIA, IOSH, IEMA, IRM or the International Compliance Association
• A recognised data-protection practitioner qualification or equivalent evidence of advanced professional development

Skills & Experience

Required:

• Substantial senior-level experience in governance, risk, audit, compliance or integrated management systems within a regulated, infrastructure, construction, labour-supply or similarly complex environment
• Practical experience of developing risk-based assurance plans, leading reviews and presenting findings to Executive or senior leadership audiences.
• Strong working knowledge of ISO 9001, ISO 14001 and ISO 45001, including management review, internal audit, external certification and continual improvement.
• The judgement and personal credibility to handle sensitive information, provide independent challenge and communicate complex concerns clearly and proportionately.

Desirable:

• Experience of rail-sector supplier assurance, RISQS, Sentinel sponsorship governance or major infrastructure client framework
• Experience of leading a governance, compliance or assurance team and managing an annual assurance budget or programme of work