GRC Officer

About this role

About Us In 2019, the founders were working as engineers solving complex cross-domain problems within government organisations. TwinStream was formed to bring together their collective expertise and experience into a single business, focused on delivering technical excellence and high-quality service to clients. Since then, the company has grown to over 100 team members across the UK, with colleagues working both on-site with clients, hybrid and remotely from home.

Details: Salary: £40,000 - £55,000 DOE Location: Fully remote About the role As our Governance, Risk and Compliance (GRC) professional, you’ll take ownership of core GRC activities and play a leading role in shaping and improving our approach to governance, risk and compliance across the business. You’ll work closely with teams across the organisation to help them understand, meet and demonstrate compliance requirements in a practical and proportionate way.

Our compliance landscape is varied, covering UK legislation and regulation, UK government commercial and contractual requirements, MOD security standards, Cyber Essentials Plus, ISO 27001, ISO 9001, ISO 20000-1 and ISO 14001. Working alongside an experienced Information Security Manager, who will provide specialist cyber security expertise, and other business leads, you’ll bring the GRC knowledge and perspective needed to ensure we meet our obligations, manage risk effectively and maintain clear evidence of compliance for internal and external stakeholders.

Responsibilities Own the day-to-day operation, maintenance and continuous improvement of the organisation’s governance and compliance activities, including ISO-certified management systems. Plan and conduct internal audits and other assurance activities. Lead the coordination of external certification audits and compliance assessments, including those relating to ISO-certified management systems. Ensure the appropriate records and evidence are in place to demonstrate compliance, identifying gaps and driving corrective actions where needed.

Produce clear, meaningful compliance reports for senior leadership. Coordinate and collaborate with stakeholders across the organisation to ensure risks are managed effectively, share requirements, gather information, coordinate governance and compliance activities, and drive agreed actions through to completion. With support from subject matter experts, maintain an overview of existing and emerging regulatory, contractual and industry requirements, helping to coordinate the organisation’s response where changes are needed.