Compliance & Governance Manager

Conduct independent internal audits and assurance reviews to demonstrate compliance and readiness for external audits.

Drive a culture of continuous improvement, accountability, and risk awareness.

Provide expert guidance on governance, privacy, information security, AI governance, quality management, and regulatory compliance.

Key Responsibilities

Governance and Compliance

Develop, implement, and maintain governance frameworks, policies, standards, and procedures across Harris UK Business Units.

Monitor compliance with applicable legislation, regulations, contractual commitments, and internal policies.

Provide guidance and support on compliance-related matters to Business Unit leadership teams.

Identify compliance risks and support the development of mitigation actions and improvement plans.

Ensure governance processes remain effective, proportionate, and aligned with corporate objectives.

Information Security, Privacy and Risk Management

Support compliance with UK GDPR and wider privacy obligations.

Assist Business Units in implementing and maintaining appropriate information security controls.

Facilitate risk assessments and support ongoing risk management activities.

Support incident management, corrective actions, and compliance investigations where required.

Contribute to supplier assurance and third-party risk management activities.

Management Systems and Certification

Support the operation and continual improvement of certified management systems.

Coordinate and support external certification audits and surveillance activities.

Maintain governance documentation, registers, audit records, and compliance evidence.

Ensure Business Units remain compliant with applicable industry standards and frameworks.

Internal Audit and Assurance

Develop and deliver internal audit programmes across Harris UK Business Units.

Conduct audits against statutory, regulatory, contractual, and certification requirements.

Produce audit reports, findings, observations, and recommendations.

Monitor corrective actions through to completion.

Provide assurance reporting to senior management and key stakeholders.

Stakeholder Engagement

Work collaboratively with operational, technical, legal, HR, and leadership teams.

Provide compliance advice during acquisitions, business integrations, new product introductions, and strategic initiatives.

Liaise with customers, auditors, regulators, certification bodies, and external stakeholders as required.

Deliver awareness sessions and guidance on compliance and governance matters.

Key Compliance Areas (Non-Exhaustive)

UK GDPR and Data Protection

Information Security and Cyber Security

ISO/IEC 27001 Information Security Management Systems

ISO/IEC 42001 Artificial Intelligence Management Systems

ISO 9001 Quality Management Systems

NHS Data Security and Protection Toolkit (DSPT)

UKCA and MHRA Regulatory Compliance (where applicable)

Clinical Safety Standards (DCB0129 and DCB0160)

Artificial Intelligence Governance and Regulation

Medical Device Regulations

SaaS Security and Governance

Risk Management and Enterprise Risk Frameworks

Supplier Assurance and Third-Party Risk Management

Health, Safety and Environmental Compliance

Export Controls, ITAR and EAR requirements

Physical and Personnel Security

Knowledge, Skills and Experience

Essential

Proven experience in a compliance, governance, risk, information security, privacy, quality, or regulatory role.

Strong understanding of governance frameworks and management systems.

Experience conducting internal audits and managing compliance programmes.

Knowledge of UK GDPR and broader regulatory compliance obligations.

Experience supporting ISO management systems, particularly ISO 27001 and/or ISO 9001.

Experience supporting ISO/IEC 42001, NHS DSPT, DCB0129, DCB0160, UKCA, or MHRA compliance.

Experience within SaaS, software, healthcare technology, or regulated technology environments.

Excellent written and verbal communication skills.

Strong analytical, organisational, and problem-solving abilities.

Ability to engage effectively with stakeholders at all levels.

Experience developing and maintaining policies, procedures, and governance documentation.

Ability to manage multiple priorities and deliver outcomes independently.

Desirable

Knowledge of AI governance and emerging regulatory frameworks.

Experience supporting mergers, acquisitions, or multi-business group environments.

Professional certifications in compliance, governance, auditing, information security, privacy, risk management, or quality management.

Success Measures

Maintain and improve compliance maturity across Harris UK Business Units.

Deliver a risk-based internal audit programme and assurance framework.

Support successful certification and regulatory outcomes.

Drive standardisation and best practice across the UK portfolio.

Enhance stakeholder confidence through effective governance, reporting, and compliance oversight.

Contribute to the continual improvement of compliance, governance, security, quality, and risk management practices across Harris UK.

Benefits

Harris offers an extremely competitive UK employee benefits programme:

5 Personal Days leave entitlement are granted over and above the standard 25 days holiday and bank holidays.

Harris also offers all UK employees an annual Lifestyle Reward amounting £325 per annum/pro rata.

Private healthcare and dentalcare

Employee share options

Supporting Your Application

Our recruitment process will comprise of interviews and, at times an assessment day and/or a presentation. As an equal opportunities’ employer, we want to make sure we do all we can to make this a positive experience for you. When applying, please make us aware on your application of any adjustments or additional support we can provide you with before or on the day of an interview.