Governance & Assurance Manager

About us SFG20 is the industry standard for building maintenance. Providing services and pioneering technologies that empower people to create and sustain safer buildings. Our mission is to make buildings better using our standard, software and expertise. Our vision is to become the leading authority for built environment maintenance that protects and enhances quality of life. About the role The Governance & Assurance Manager will establish, own and continually improve SFG20's governance and compliance framework, supporting enterprise growth, customer assurance and regulatory obligations. The role will act as the central point of contact for customer due diligence, information governance and ISO management, ensuring SFG20 maintains the governance capability expected by enterprise and public sector customers while delivering and maintaining ISO 9001 and ISO 27001 certification following separation from BESA. This is a new role, providing the opportunity to build governance capability from the ground up. About the role | Key Responsibilities Customer Assurance Own the end-to-end management of customer assurance activities including: Vendor Risk Assessments (VRAs) Security questionnaires Customer due diligence Compliance responses for bids and tenders Coordinate responses across internal functions, ensuring responses are accurate, consistent and delivered within customer deadlines. Maintain and continually improve the customer assurance knowledge base. ISO & Certification Management Lead the implementation, certification and ongoing maintenance of: ISO 9001 ISO 27001 Cyber Essentials/Cyber Essentials Plus Including: Internal audits Management reviews Corrective actions Continuous improvement External certification audits Annual surveillance audits Governance, Compliance & Risk Coordinate compliance activities across the business. Support supplier assurance activities. Maintain governance evidence and audit records. Ensure regulatory and contractual obligations are met. Support customer and external audits. Own governance policies, procedures and document control. Monitor compliance activities and produce management reporting. Promote good governance across the organisation. Compliance and internal processes for Data Protection About you Essential Experience managing ISO 9001 and/or ISO 27001. Experience responding to customer security questionnaires or vendor assessments. Experience developing governance frameworks and policies. Strong project management skills. Excellent written communication. Ability to influence stakeholders across all levels. Strong organisational skills. Comfortable interpreting technical information for non-technical audiences. Desirable ISO 9001 Lead Implementer or Internal Auditor ISO 27001 Lead Implementer or Internal Auditor Knowledge of Cyber Essentials Plus Knowledge of GDPR Experience with Loopio or similar proposal management software. Experience within SaaS, technology or enterprise software. Experience working with public sector customers. Additional Information All candidates must be able to demonstrate a pre-existing right to work and travel within the UK. We are unfortunately not able to offer sponsorship. Documentary evidence will be required. All offers are subject to satisfactory vetting and reference checks. Our Benefits: 🏖 26 days holiday + Bank holidays + buy up to 5 days 🏥 Private Medical insurance with BUPA 🏡 Remote/Hybrid first policy 💙 Employee Assistance programme with WeCare 👨‍👩‍👧 Enhanced Family Friendly Benefits 🏋️‍♂️ Gym Discounts 🚀and more! Equal opportunities for everyone Diversity and inclusion are our priorities, and we’re ensuring we have lots of support so our people can grow at SFG20 and do their best work! We embrace diversity by fostering an inclusive environment where everyone feels welcome, safe and able to bring their whole self to work. We’re an equal opportunity employer. Applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity or disability status. If there’s anything we can do to accommodate your specific situation, please let us know.