Compliance Manager, Risk and Compliance in London

Elixirr International plc is a global consulting firm with a bold ambition: to become the best consulting firm in the world.

Founded in 2009 to challenge a declining industry standard, we've grown from a single vision into a powerhouse of entrepreneurial talent, delivering boardroom strategy through to execution.

This has broadened our capabilities across creative, digital marketing, data and AI, procurement, transformation, and more.

Our vision of becoming a services unicorn is firmly within reach – and this is just the beginning.

We're looking for exceptional talent to join us on this exciting growth journey and shape the future of consulting.

It's where it all began for us and continues to be a hub of innovation and growth.

The Role Combining the agility of a challenger firm with the governance standards of a listed company, we are now seeking an ambitious, commercially astute Global Risk & Compliance Manager to build and scale our global risk and compliance capability, working closely with Legal, IT, Operations and senior leadership.

You will be responsible for the end-to-end risk and compliance framework for the Group, ensuring governance is robust, commercially pragmatic, audit-ready and scalable across operating companies and acquisitions.

This role offers a genuine opportunity to build and scale a global risk and compliance function within an entrepreneurial, Main Market-listed environment.

Key Responsibilities Enterprise Risk, Cyber & Governance Manage and enhance the Group's enterprise risk framework, global risk register and full risk lifecycle (identification, mitigation, testing, remediation and reporting).

Maintain a Group-wide consolidated view of strategic, operational, financial, regulatory and cyber risks, including horizon scanning across jurisdictions.

Reduce cyber risk exposure and strengthen cybersecurity governance in partnership with the CISO, aligning to global standards e. g.

Contribute to Board, Audit Committee and Annual Report risk disclosures.

Risk & Compliance Operations Lead the Group's risk and compliance programme, ensuring controls are well-designed, operational and scalable, particularly for SOC 2 Type 2 and ISO 27001.

Maintain a centralised, audit-ready evidence repository and coordinate internal/external audits, client reviews and due diligence.

Oversee remediation plans and ensure continuous evidence collection.

Develop consistent, lightweight playbooks for vendor intake, audit readiness and control testing across operating companies.

Policy, Regulatory & Third-Party Oversight Oversee global policies and the full policy lifecycle, ensuring alignment with regulatory and listing obligations.

Manage and deliver risk and compliance training, including competency testing where appropriate.

Support global data protection compliance (GDPR, CCPA and equivalents) as a data processor/service provider.

Own vendor and third-party risk management, ensuring proportionate due diligence of suppliers, clients and acquisition targets.

Reporting & Stakeholder Leadership Deliver executive reporting on risk posture, KPIs, exceptions, remediation and audit milestones.

Act as the bridge between IT/Security, Legal, HR, Finance, M&A and Operations leadership, driving accountability without a policing approach.

Experience & Qualifications We are seeking someone who combines technical depth with commercial judgement.

Essential5+ years' experience in risk, compliance, audit or governance roles within professional services, consulting, technology or a listed environment.

Strong experience managing risk registers, control frameworks, remediation plans and executive reporting.

Practical understanding and experience of global data protection and supplier risk requirements.

Experience translating and documenting technical controls and regulatory requirements into operational practice in partnership with technical teams.

Desirable Experience in a fast-growth or acquisition-heavy environment.

Understanding of cybersecurity governance and information security risk management.

Law or business-related degree (regulatory legal background advantageous).

Professional compliance qualification.

Commercially pragmatic, balancing robust risk management with entrepreneurial growth.

Motivated by building and scaling processes rather than maintaining the status quo.