Compliance Officer

Compliance framework and governance

• Develop, maintain and continuously improve the corporate compliance programme.

• Translate legal, regulatory and contractual requirements into practical policies, procedures and controls.

• Maintain the compliance register and monitor changes in relevant legislation, regulations and industry standards.

• Advise senior management on compliance risks, obligations and emerging developments.

• Prepare compliance reports for senior management, clients and governance committees.

• Support the development of an ethical, transparent and accountable organisational culture.

Risk assessment and monitoring

• Conduct periodic compliance risk assessments across business operations, security services and corporate functions.

• Develop and execute risk-based compliance monitoring and testing plans.

• Assess the effectiveness of compliance controls and recommend corrective or preventive measures.

• Monitor compliance with licences, permits, certifications and client-specific requirements.

• Identify trends, systemic weaknesses and emerging risks through data analysis, audits and incident reviews.

• Maintain accurate records and evidence demonstrating regulatory and contractual compliance.

Policies and procedures

• Draft, review and update compliance policies, standards and procedures.

• Ensure policies are effectively communicated, implemented and periodically reviewed.

• Support business owners in developing proportionate and workable controls.

• Promote consistent compliance practices across departments, locations and contracted services.

Investigations and incident management

• Receive, assess and investigate suspected compliance breaches, misconduct and policy violations.

• Ensure investigations are conducted objectively, confidentially and in accordance with applicable requirements.

• Coordinate corrective actions and monitor them through to completion.

• Support whistleblowing and confidential reporting arrangements.

• Escalate significant compliance concerns promptly to the appropriate management or governance body.

• Liaise with legal advisers, regulators, clients or competent authorities when authorised and required.

Due diligence and third-party compliance

• Conduct or oversee compliance due diligence on clients, suppliers, subcontractors and business partners.

• Assess risks relating to bribery and corruption, conflicts of interest, sanctions, fraud, human rights and ethical business conduct.

• Ensure appropriate compliance clauses and monitoring requirements are included in contracts.

• Monitor higher-risk third parties and recommend risk-mitigation measures.

Training and awareness

• Develop and deliver compliance training and awareness programmes.

• Provide practical guidance to employees, managers and operational security personnel.

• Ensure mandatory training is completed and accurately recorded.

• Promote awareness of the code of conduct, confidential reporting channels and individual compliance responsibilities.

Audit and assurance

• Coordinate internal and external compliance audits.

• Support certification and assurance activities, including relevant security, quality, privacy and information-security standards.

• Track audit findings, management actions and remediation deadlines.

• Provide compliance evidence for client reviews, tenders and regulatory inspections.

Key compliance areas

The role may include oversight of:

• Corporate security legislation and licensing requirements.

• Anti-bribery, corruption and fraud prevention.

• Sanctions and restricted-party screening.

• Data protection, privacy and information security.

• Confidentiality and appropriate handling of sensitive information.

• Conflicts of interest and ethical conduct.

• Whistleblowing and non-retaliation arrangements.

• Third-party and supply-chain compliance.

• Employment-related compliance in cooperation with Human Resources.

• Health, safety and environmental obligations in cooperation with responsible specialists.

• Contractual and client-specific security requirements.

• Relevant management systems and industry standards.