Compliance, Risk and Assurance Lead in Crewe

Rail Services Compliance, Risk and Assurance Lead – Hybrid working option with travel across the businesses required.

Reporting to: ESG Director – Rail Services

Contract: Permanent

Location: Crewe

Closing Date: The Rail Services division supports our four business areas of Grand Central (GC), Arriva TrainCare (ATC), Arriva Road Transport Services (ARTS), and RTS infrastructure.

We have a fantastic opportunity to join the Arriva team as a Compliance, Risk and Assurance Lead based out of our Crewe offices to help support our Rail Services Business. As a Compliance, Risk and Assurance Lead, you will use your experience and influence to drive the standardisation, assurance, and continuous improvement of enterprise risk management, corporate policy compliance, and data protection across Rail Services.

The Role – Compliance, Risk and Assurance Lead:

Reporting to the ESG Director – Rail Services, you will ensure a consistent, effective, and efficient approach to risk, fully aligned with Arriva Group standards. Acting as a trusted advisor, you will enhance risk maturity, strengthen compliance culture, and deliver clear, insight-led assurance across a complex, multi-entity environment.

Key Accountabilities:

• Lead enterprise risk management, corporate policy compliance, and data protection performance across Rail Services.
• Provide high-quality, timely reporting to Group and Rail Services Executive.
• Ensure robust control frameworks and assurance processes are embedded and effective.
• Own risk visibility across all Rail Services businesses.
• Build and sustain a strong risk and compliance culture.
• Maintain audit readiness and ensure timely closure of all audit actions.

Key Responsibilities:

• Act as a trusted advisor to the Rail Services Executive and ESG Director.
• Drive a culture of accountability, transparency, and continuous improvement.
• Own and evolve the enterprise risk management framework for Rail Services.
• Lead quarterly risk reviews and embed consistent risk disciplines.
• Ensure clear identification, assessment, and mitigation of risks and controls.
• Deliver insight-driven risk reporting and act as UKT Risk Champion.
• Build risk capability across the organisation through coaching and development.
• Own and continuously improve the compliance framework.
• Lead Group submissions and compliance reporting.
• Provide oversight of data protection and retention practices.
• Act as escalation point for data protection complex issues.
• Design and deliver a risk-based assurance programme.
• Coordinate with Internal Audit and ensure timely action closure.

Our Requirements – Compliance and Risk Manager:

• Significant management experience in risk, compliance, or governance within a complex organisation.
• Expertise in enterprise risk management frameworks and practices.
• Strong working knowledge of corporate compliance and data protection requirements.
• Proven ability to influence at Executive level and operate with high autonomy.
• Track record of driving change, improving maturity, and embedding culture.
• Excellent stakeholder management, analytical, and communication skills.
• Pragmatic, outcome-focused approach aligned to risk appetite.
• Collaborative mindset with the ability to operate across multiple business units and Group.

We acknowledge the importance of our people's diverse experiences, talents, and cultures. Embracing diversity and inclusion is a key component of our talent strategy. The creation of a diverse, inclusive workforce is central to our ability to unlock potential and enhance our success.