Head of Governance & Compliance, Doctor Care Anywhere

• Analytical mind with an aptitude for figures and data-driven argumentation, very good Excel skills are a must
• High level written communication skills, including but not limited to policy writing, report, plan and training
• Strong attention to details and ability to identify abnormalities by triangulation
• Problem solving will come naturally to you, with the ability to set priorities, manage multiple deadlines and effectively deliver tasks and processes on time
• You will be able to work both autonomously, and effectively contribute to a team
• Highly computer literate (Microsoft and business applications) with the ability to familiarise quickly to new systems / programs
• Experience of an ISMS production and delivery as part of an ISO27001 certified programme
• Experience of managing client/business partner security assurance programmes
• Recent experience of working in a similar capacity in a healthcare or insurance environment
• Excellent interpersonal skills, comfortable working at all levels within an organisation and in a wide variety of situations
• Relevant industry certification (e.g. ISO 27001 Lead Auditor, CISSP, CISM, etc.) desirable
• Excellent knowledge of methodologies, processes and tools associated with supporting this function effectivel

Desirable

• Your new role: As the Senior Governance & Compliance Manager you will work closely with and support the Chief Risk Officer and have input in the scoping and delivery of end to end GRC initiatives and projects, to drive compliance and improve standards for our teams, patients and doctors, within Doctor Care Anywhere (DCA) and its subsidiary companies
• Responsible for delivery and maintenance of the compliance activities – ISO 27001 and 9001 requirement, including maintenance of ISMS. This role will manage the process across the organisation working closely with all departments and teams delivering ISO workshops and any required training
• Manage the document control process for the business
• Oversee the implementation and embedment of DCA’s policies, processes and protocols whilst ensuring that they have been documented, reviewed periodically and are easily accessible by staff
• When required assist with the development of GRC policies, procedures and frameworks
• Develop an internal control risk management assessment process to test compliance against policy and procedure requirements and principles
• Support organisational compliance / regulations initiatives across clinical and non-clinical areas
• Manage the ISO 27001 and 9001 ISO certification and any new ISO certifications the company signs up to. Ensure QMS processes are established, implemented, and maintained. Review and planning of internal audits
• Coordinate and manage the ISO audit on an annual basis and for recertification
• Contribute to the delivery of the GRC annual assurance plan
• Undertake second line ISO/Internal Audit and other reviews at least annually prior to external audits
• Manage the organisation’s business continuity and operational resilience plans and processes working with all clinical and non-clinical areas
• The management of the Compliance Manager and any other staff members across the GRC team