Risk and Governance Manager in Glasgow

About Us

3173 is a leading Professional Services Group of pensions companies with clients throughout the UK, who are currently seeking a Risk and Compliance Manager on a full time, permanent basis. This is an exciting opportunity to join a business with ambitious growth plans over the coming years.

About You

We are looking for a Risk and Compliance Manager who will play a key role in strengthening the organisation’s risk and compliance framework, ensuring the effective identification, assessment, management, and reporting of risks. You will drive compliance with applicable laws, rules and regulations, while embedding a strong risk‑aware culture, applying sound ethical judgment, and ensuring risk and control issues are escalated and managed with transparency. In this role, you will report to the Head of Audit, Risk and Compliance and will be primarily aligned to the Spence & Partners business, working closely with its teams to provide risk and compliance oversight and support. You will oversee and monitor adherence to 3173 Group policies and procedures, create and maintain risk and compliance program related materials, and work collaboratively with the business by providing regulatory compliance assistance and assurance. Your objective will be to ensure the organisation operates in a compliant, lawful, and ethical manner, while proactively managing risk, supporting the achievement of business objectives, and adapting to evolving client contractual requirements.

Responsibilities

• Develop and implement an effective compliance program.
• Maintain the organisation’s risk management framework, including risk appetite, risk registers, and reporting processes.
• Design and deliver a risk‑based compliance assurance programme, including planning and executing assurance testing to assess the effectiveness of controls and identify areas for improvement.
• Create sound internal controls and assess their effectiveness in mitigating key risks.
• Draft and revise company policies.
• Provide advice and credible challenge to stakeholders on risk exposure and the application of relevant policy and control requirements.
• Undertake monitoring reviews and checks as directed to ensure compliance risks within 3173 are effectively identified, assessed, managed and reported, in line with the organisation’s risk appetite.
• Conduct data protection impact assessments (DPIAs) and Third‑Party Risk Assessments to identify, assess, and mitigate potential privacy risks.
• Lead efforts to respond to data subject access requests (DSARs) and manage processes related to data breach incidents.
• Support the development and maintenance of relationships with key regulators, as well as assisting with regulatory reviews and ensuring that any follow up actions are addressed.
• Understand regulatory requirements, particularly in relation to the Financial Conduct Authority, and The Pensions Regulator, and assist with the delivery of regulator attestations and actions.
• Collaborate with external auditors and third‑party suppliers when needed.
• Feed into audit plans by identifying areas for compliance review and provide support throughout the review process, where necessary.
• Keep abreast of regulatory changes and emerging industry developments to proactively identify new and evolving risks.
• Support the development of a strong risk culture by promoting accountability and risk awareness across the business.
• Inform and advise the business of changes to regulations.
• Assist with the preparation of monthly risk and compliance reporting.
• Support the development of a strong risk culture by promoting accountability and risk awareness across the business.
• Additional duties as assigned.

Experience

• Proven experience as a Risk and Compliance Officer or Risk and Compliance Manager.
• Strong understanding of risk management principles, including risk identification, assessment, mitigation, and reporting.
• Expertise of Compliance laws, rules, regulations and risks (e.g. Anti‑Money Laundering, Data Protection, Anti‑Bribery and Corruption, Consumer Duty, FCA Senior Managers & Certification Regime).
• Familiar with The Pensions Regulator, Financial Conduct Authority and Information Commissioner's Office regulatory requirements.
• Prior experience in operational risk, testing or audit or regulatory examination, preferred.
• Excellent written, verbal and analytical skills.
• Highly motivated self‑starter, flexible, innovative and adaptive.
• Strong attention to detail, team oriented, organised.
• Integrity and professional ethics.