Head of Compliance

SPS is a leading technology-driven business transformation company. With our innovative Enterprise Workplace Solutions, we empower organisations to adopt hybrid work concepts to enhance productivity and flexibility. Our Technology Business Solutions bring together cutting-edge technology, deep vertical process expertise, and a diverse global workforce to support clients in their digital transformation journey and efficiently tackle their most complex challenges.

Headquartered in Zurich, Switzerland, SPS operates in more than 20 countries and focuses on clients in banking, insurance and health. SPS has more than 8,500 employees and is recognized with a world-class NPS by its global client base.

We act with precision, connect people to the right information, and turn data into insights for better outcomes.

As Head of Compliance you will be supporting the UK&I and reporting to the Chief Finance Officer and Chief Executive Officer, the successful individual will be responsible for managing a specialist team, an active member supporting the UK ELT and member of the Global Compliance Circle.

This is an established role with significant responsibility for managing internal and external audits to ensure the renewal of long
- Maintain and continually improve PCI DSS compliance, ISMS (ISO/IEC 27001), QMS (ISO 9001), EMS (ISO 14001), OH&S (ISO 45001) and BCMS (ISO 22301); keep risk, objectives, KPIs and SoA current.

This role exists to safeguard SPS’s, certifications and customer trust by owning our integrated management system (IMS) and leading all internal/external audits across security, quality, environmental, health & safety, payments, and specialist industry schemes.

A strategic and systematic plan for the reduction of risk in the business through the creation of policies, procedures, establishing BCP, RA’s and continuous monitoring and reporting.

Working closely with multiple stake holders in the business and wider group, the ideal candidate will need to collaborate with all facets of the business to support best practice, quality and ensure compliance within the whole business.

Aside of the above the successful candidate will also be expected to carry out other duties consummate with the Compliance function within SPS.

• Head of Compliance and DPO
  , with day to day supervision of a specialist team.
• Global Compliance Circle member with regular reporting and deployment activities.
• An information security management system (ISMS) and certification (BS ISO/IEC 27001), plus BS ISO/IEC 27002 controls and monitoring compliance thereafter. Also benefit would be to have undertaken the role of Information security officer (ISO).
• Audit & certification leadership – Plan and lead internal audits and third‑party assessments; manage non‑conformities to closure; ensure timely renewal/transition of certifications and schemes (see “Standards in scope”).
• Integrated management system (IMS) – Maintain and continually improve ISMS (ISO/IEC 27001), QMS (ISO 9001), EMS (ISO 14001), OH&S (ISO 45001) and BCMS (ISO 22301); keep risk, objectives, KPIs and SoA current.
• Risk & control – Enterprise risk assessment, control design, supplier governance, and compliance monitoring (incl. service partners).
• Business continuity – Coordinate BIA/RA, BC/DR plans, tabletop and live tests; address lessons learned.
• Payments & secure print
  and destruction – Maintain PCI DSS compliance and cheque/secure print accreditations (CPAS Standard 55, secure destruction). BS 15713 Secure Destruction
• Policy & awareness – Keep all SPS policies current; drive awareness, training, and disciplinary pathways with HR. Including whistleblowing.
• Reporting & governance – Monthly UKI Board reports, compliance KPIs/SLAs, and management reviews required by the standards. The post holder is responsible for informing the CEO directly of any major risks to the business, to its customers and other stakeholders and to the reputation of the business.

• ISO 27001:2022 Lead Implementer or Auditor certification (IRCA)
• Experience in mailing services, print or document management
• Secure print/cheque printing (CPAS/Standard 55), BS 10008,…