Compliance & IMS Lead

Purpose: TVSSCS are seeking a Compliance & IMS Lead to own, lead, and continuously improve the organisation’s Integrated Management System (IMS) across a complex and diverse supply chain business operating across the UK and Europe.

This is not a role focused solely on assurance — it is about leading compliance as a business enabler, driving simplification, consistency, and effective implementation of governance across operational teams. The Compliance & IMS Lead will, ensuring that all regulatory, contractual, and certification requirements are embedded into day-to-day business activities.

Reporting to the Head of Compliance, the role operates with a high degree of autonomy and leadership, taking full accountability for the design, effectiveness, and performance of the IMS, whilst supporting SME colleagues to interpret and apply requirements in a practical and proportionate way.

You will be responsible for ensuring the organisation maintains and enhances compliance across key frameworks, including:

ISO 9001 (Quality Management)

ISO 27001 (Information Security)

ISO 14001 (Environmental Management)

ISO 45001 (Occupational Health & Safety)

ISO 22301 (Business Continuity)

Alongside broader regulatory and client-driven requirements such as:

PCI-DSS (Payment Card Industry Data Security Standard)

DPA / UK GDPR (Data Protection Act and data privacy requirements)

CE and CE+ marking compliance

Contractual, industry-specific, and client compliance obligations

Main Duties & Responsibilities: Strategy & Leadership

Act as the lead owner of the Integrated Management System (IMS), driving a cohesive and simplified approach across all compliance frameworks.

Define and implement a practical, risk-based compliance strategy that supports operational delivery and business growth.

Lead the simplification and harmonisation of policies, processes, and controls across ISO and regulatory frameworks.

Promote a compliance-led culture, ensuring accountability sits within the business, supported by clear guidance and structure.

• IMS Ownership & Compliance Framework

Take full accountability for the design, implementation, and continuous improvement of the IMS, aligned to Annex SL principles.

Ensure ISO standards (9001, 27001, 14001, 45001, 22301) are integrated into a single, efficient management system.

Incorporate broader compliance requirements (PCI, DPA/GDPR, CE/CE+, and client-specific standards) into the IMS framework.

Reduce complexity by eliminating duplication and creating clear, user-friendly compliance processes.

Own certification lifecycle management, including audits, recertification, and external assurance.

• Audit, Assurance & Risk Management

Lead and deliver a risk-based internal audit programme across ISO and regulatory requirements.

Ensure effective management of non-conformities, incidents, and corrective actions, driving root cause resolution.

Develop and maintain a central risk and control framework, aligned to business and compliance priorities.

Provide clear, evidence-based assurance on compliance performance and risk exposure.

• Operational Integration & SME Enablement

Embed compliance requirements into operational processes, supplier management, and contract delivery.

Act as a central point of expertise, supporting SMEs across Information Security, HSE, Quality, Sustainability, and Operations.

Enable subject matter experts to own compliance within their disciplines, providing structure, guidance, and governance.

Translate complex ISO and regulatory requirements into practical, workable solutions for operational teams.

Drive consistency in how compliance is applied across regions, functions, and contracts.

• Regulatory & Client Compliance

Ensure compliance with key regulatory frameworks including PCI-DSS, UK GDPR/DPA, CE/CE+, and wider contractual obligations.

Maintain awareness of regulatory changes and ensure the business adapts proactively.

Support client compliance requirements, audits, and due diligence activities.

Ensure supplier compliance aligns with organisational and client standards.

• Stakeholder Engagement & Influence

Act as the primary compliance lead across the business, engaging with senior stakeholders to drive accountability.

Build effective relationships with internal teams, clients, auditors, and regulators.

Provide clear, pragmatic advice to support compliance-informed decision-making.

Lead external audit engagements and act as the key point of contact for certification bodies.

• Measurement, Reporting & Continuous Improvement

Develop and manage IMS performance dashboards, providing clear insight into compliance status and trends.

Track and report on key metrics, including:

Audit outcomes

Non-conformities and corrective actions

Risk exposure

Compliance performance indicators

Drive continuous improvement through data, insight, and simplification initiatives.

Ensure the IMS evolves in line with business growth and regulatory change.

• Communication & Subject Matter Expertise

Act as the organisation’s lead expert on integrated compliance and ISO frameworks.

Provide clear, simplified guidance that enables teams to comply without unnecessary complexity.

Support training and awareness programmes focused on practical application of compliance requirements.

Keep the organisation ahead of emerging trends, standards, and compliance expectations.

Knowledge, Skills, Qualifications and Experience:

Experience

Proven experience owning and managing an Integrated Management System (IMS)

Strong experience across multiple ISO standards (9001, 27001, 14001, 45001, 22301)

Experience working with broader regulatory frameworks (PCI-DSS, GDPR/DPA, CE/CE+, or similar)

Track record of simplifying and embedding compliance in operational environments

Experience working in complex, multi-stakeholder or supply chain-driven organisations

Skills & Capabilities

Ability to lead compliance as a function, not just support it

Strong focus on simplification, usability, and operational effectiveness

Excellent understanding of integrated, risk-based compliance frameworks

Strong audit, assurance, and problem-solving capability

Ability to enable SMEs rather than replace them, building capability across the business

Confident communicator able to influence at all levels

Qualifications (Desirable)

Degree or equivalent experience in Compliance, Risk, Business, or related field

Lead Auditor qualifications across relevant ISO standards

Professional certifications in compliance, governance, or risk (IRCA, CQI, ISACA, IOSH, etc.)

In return for your hard work, we offer excellent career progression opportunities and a professional environment where you can acquire, use, and continue developing your skills.

Your package will include:

• Competitive Salary

• Pension scheme with up to 6% employer matched contributions

• Life assurance

• 25 days holiday + 8 statutory bank holidays

• Holiday buy-back scheme (5 additional days available)

• Salary sacrifice car scheme - A cost-effective way to lease a new car via salary sacrifice (subject to meeting minimum earnings eligibility criteria).

• Established hybrid working structure

• Enhanced maternity and paternity leave

• Employee Assistance Programme supporting wellness with immediate access for you and your family to:

• Virtual GP consultations and second opinions

• Mental health support and counselling

• Online physiotherapy

• Access to CONNECTPlus long-term health condition support

• Wellbeing and healthy living support

• Cycle to work scheme

• Professional Membership and Study Sponsorship

• Quarterly employee recognition awards

• Employee referral scheme with financial reward

• Benefits hub with employee retail discounts

• Discounted eye test vouchers

At TVS SCS we encourage and support our employees to realise their potential. They are empowered to take initiative and achieve high impact results that really make a difference to our business and our customers.

• Security Clearance Requirement

Candidates must be eligible to undergo Baseline Personnel Security Standard (BPSS) clearance. This process includes verification of identity, right to work in the UK, employment history, and a basic criminal records check for unspent convictions. Please note that candidates must have resided in the UK for 3 years to meet BPSS eligibility requirements.

If you require any adjustments to allow you take a full and active part in the selection process, please notify us as part of your application. Please note TVS Supply Chain Solutions is an Equal Opportunities Employer.

TVS have signed the Armed Forces covenant and are a forces friendly employer