Role Overview
The Audit and Compliance Officer will play a pivotal role in strengthening operations focusing on risk management, conducting internal audit and creating compliance frameworks. The role predominantly involves creating audit frameworks, audit reporting, and working with Heads of Department on understanding compliance requirements such as those under GDPR, Anti-Money-Laundering, Right to Rent, Know Your Customer, Right to Work, Cyber Security etc, and ensuring the company's accreditations (such as WELL and BREEAM) remain up to date and compliant.
Risk & Audits focusing on risk management and making sure we have the right structures, policies and processes in place, carrying out internal audits department by department, and establishing what those structures and audits should look like.
This role reports up to Senior Leadership within the business.
Key Responsibilities
Audit & Risk Management
- Create and maintain an annual audit plan, signed off by Senior Management and in conjunction with the risk register for the business
- Conduct regular internal audits and inspections, creating a scheduled audit framework to identify areas for improvement and implement corrective actions
- Prepare and present clear, concise audit reports with evidence-backed findings, ensuring proper documentation and communication
- Lead the assessment of internal control environments, working with Heads of Departments to focus on governance, business continuity, and risk management
- Develop and track corrective actions from internal audits to completion, maintaining stakeholder engagement throughout the process
- Perform operational audits, ensuring the right structures, policies, and processes are in place across departments, liaising with Heads of Departments and the HR/L&D team for training to be arranged (internal/external) as and when required to ensure teams are aware of their responsibilities and remain compliant
Compliance Management
- Keep up to date with legal and regulatory changes that impact the business and statutory requirements, working with Heads of Departments to understand these requirements and how they apply to the business, including any changes needed to ensure compliance
- Check compliance and keep up to date with compliance aspects relating to renting for Corporate Housing, Anti Money Laundering and Know Your Client (KYC) compliance
- Develop and deliver a robust compliance schedule, ensuring timely inspections and remedials within budget
- Manage compliance with GDPR and cyber security regulations in collaboration with IT and internal managers
- Oversee the annual renewal process for certificates and accreditations, including ISO certifications and WELL/BREEAM accreditations, ensuring that audits are undertaken to maintain compliance and adherence geared towards maintaining and continuously achieving these standards
- Maintain and manage the compliance risk register, producing regular adherence and risk mitigation reports. Ensure any compliance breaches are reported and added to internal schedules (such as the GDPR breach spreadsheet) and that all information required to support insurance claims or issues are collated and addressed
- Support business continuity planning beyond health and safety to ensure operational resilience
Insurance Oversight
- Ensure appropriate insurance coverage and protections are in place by working closely with external brokers or insurance providers
- Make sure we have the right covers and protections in place according to the risks and needs of the business
Stakeholder Collaboration & Team Development
- Build structures and processes for effective collaboration with external consultants and internal leaders, supporting departments during the auditing process, and liaising and engaging with teams after audits for corrective measures and improvements to be made
- Assist in Whistleblowing investigations and processes - including assisting with investigating issues, reporting concerns, and resulting action plans
Quality Assurance
- Oversee the achievement and maintenance of ISO qualifications and other relevant quality standards
Required Experience
- Proven ability to independently manage internal audit and compliance assignments from initiation to reporting, adhering to professional standards
- Minimum of one year's experience in internal compliance/auditing
- Demonstrated expertise in producing clear audit reports and engaging with stakeholders
- Experience managing compliance programs and contributing to investigations or reviews to enhance operational integrity
- Familiarity with regulated industries, with knowledge of risk management, legal compliance, and industry standards
Skills & Competencies
- Strong internal auditing and analytical skills with a commitment to continuous improvement
- Excellent organisational, planning, and project management abilities
- Effective interpersonal and communication skills, with the ability to present complex information to non-technical stakeholders
- Influencing and conflict management skills to foster collaboration and address challenges constructively
- Proficiency in Microsoft Office tools (Word, Excel, PowerPoint) and Management Information (MI) reporting
- Solution-oriented mindset with a focus on troubleshooting and resolving issues
