Quality and Compliance Officer

Quality & Compliance Officer Are you a detail-oriented professional with a passion for quality management, information security, and data protection? We are seeking a dynamic and experienced Quality & Compliance Officer to play a pivotal role in ensuring this organisation’s compliance and operational excellence. Overview As the Quality & Compliance Officer, you will take ownership of the Quality Management System, Information Security Management System, and data protection compliance. This is a unique opportunity to make a significant impact by driving continuous improvement, ensuring compliance with ISO standards, and fostering a culture of quality and security across the organisation. Benefits • Salary £35,000 - £45,000 • 1k annual bonus • Full-time or part-time with 1 day from home • 25 days holiday plus bank holiday (increases with service) • Group Life Assurance • Company paid dental, health and optical schemes • Opportunities for career growth and development **Please note - this is not a remote role. You must live locally to York despite the role being hybrid.** Responsibilities • Develop and manage audit schedules to ensure compliance with ISO 9001:2015 standards. • Conduct internal audits across locations and departments, identifying areas for improvement. • Analyse customer feedback and complaint data to prioritise risk areas and implement corrective actions. • Standardise and maintain Quality Procedures (QPs) and documentation across the organisation. • Deliver auditor training and provide updates to enhance audit effectiveness. • Collaborate with managers to review Risk Registers and Quality Objectives, driving continuous improvement. • Oversee audit schedules to ensure compliance with ISO/IEC 27001:2013 standards. • Collaborate with the Technology Director to monitor, evaluate, and improve system security. • Serve as the organisation’s Data Protection Officer (DPO), ensuring compliance with GDPR and other data protection regulations. • Maintain and review data protection policies and procedures, promoting awareness across the organisation. • Apply ISO/IEC 27001 best practices to strengthen data protection controls and processes. Qualifications • Proven experience in quality management, information security, and data protection. • In-depth knowledge of ISO 9001:2015 and ISO/IEC 27001 standards preferred • Strong understanding of GDPR and data protection regulations desirable • Exceptional organisational and analytical skills with a keen eye for detail. • Excellent communication and interpersonal skills to engage with stakeholders at all levels. • Ability to lead audits, implement corrective actions, and drive continuous improvement initiatives. • Relevant certifications in quality management, information security, or data protection are highly desirable.