Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 14 days ago

Risk, Compliance & Governance Lead

rettie-and-co4 open roles

Where
Flexible (Glasgow/Edinburgh)
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowRisk, Compliance & Governance Leadrettie-and-co · Flexible (Glasgow/Edinburgh)

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on rettie-and-co's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. rettie-and-co postings stay open a median of 11 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 14 days ago

rettie-and-co median: 11 days open

The posting

Key details

Job Title: Risk & Compliance Lead Reports to: Chief Operating Officer Location: Edinburgh or Glasgow, with travel required Designated roles: HMRC Compliance Officer and Data Protection Lead

About the role

The Risk, Compliance & Governance Lead will operate and develop Rettie's governance, enterprise risk and compliance framework, providing specialist advice, constructive challenge, assurance and clear reporting to support proportionate decision-making and accountability.

The role reports to the COO, who provides executive sponsorship for governance and enterprise risk and acts as Nominated Officer/MLRO. The Risk, Compliance & Governance Lead will line manage the Risk & Compliance Analyst and will remain accountable for the quality and effectiveness of the function's work.

The postholder will also fulfil the designated role of HMRC Compliance Officer for Rettie's estate agency business and act as Data Protection Lead.

Measures of success

  • A practical, live enterprise risk framework supports Executive and Board decision-making.
  • Material risks, compliance issues and remedial actions are visible, owned and escalated early.
  • AML, data protection and other compliance arrangements are effective, evidenced and proportionate.
  • The Risk & Compliance Analyst delivers timely, accurate monitoring, evidence and action tracking.
  • Business leaders understand and accept ownership of risks and controls in their areas.

Key responsibilities

Enterprise risk and governance

  • Operate and continually improve the enterprise risk framework (currently in development) under COO sponsorship.
  • Maintain the corporate risk register, risk matrix, risk appetite and tolerance documentation, key risk indicators and escalation arrangements.
  • Facilitate risk reviews, ensuring principal and emerging risks have accountable business owners and proportionate controls.
  • Prepare clear risk and assurance reporting for the COO, Executive Management Team and Board.

Compliance and regulatory oversight

  • Maintain a proportionate compliance framework covering AML and sanctions, data protection, consumer protection, anti-bribery and corruption, complaints governance, professional obligations and relevant regulatory requirements.
  • Keep policies, controls and procedures current, lead regulatory horizon scanning and coordinate agreed changes.
  • Provide practical advice and constructive challenge to senior leaders, managers and colleagues.
  • Coordinate targeted external expertise and independent assurance where specialist depth is required.

HMRC Compliance Officer

  • Oversee Rettie’s compliance with the Money Laundering Regulations and applicable HMRC requirements across relevant branches and activities.
  • Review the effectiveness of AML policies, controls and procedures, including the business-wide risk assessment, and oversee improvements.
  • Maintain a risk-based AML monitoring and audit programme, supported by reliable management information and evidence.
  • Oversee relevant employees, agents and third-party providers involved in identifying AML risk or operating controls.
  • Report material weaknesses, breaches and overdue actions to the COO/MLRO, CEO and appropriate governance forum, and support HMRC inspections and independent audits.
  • Maintain clear separation between the Compliance Officer’s oversight role and the MLRO’s responsibility for internal disclosures, SAR decisions and DAML or DATF requests.

Data Protection Lead

  • Maintain Rettie’s data protection framework, policies, privacy notices, records of processing, retention arrangements and accountability evidence.
  • Advise on data protection risks arising from business change, technology, suppliers and AI, and coordinate DPIAs.
  • Oversee data subject rights requests, personal data breaches and privacy incidents, including escalation, record-keeping and regulatory notification processes.
  • Monitor compliance, coordinate engagement with the ICO and external specialists where required.

Assurance, reporting and leadership

  • Maintain an annual risk-based compliance and assurance plan and oversee monitoring, control testing and follow-up activity delivered by the Risk & Compliance Analyst.
  • Analyse findings and management information, agree remedial actions with accountable owners and track delivery to completion.
  • Line manage, coach and develop the Risk & Compliance Analyst, setting clear priorities and reviewing outputs.
  • Build risk and compliance capability through practical guidance, training and a culture of ownership, transparency and early escalation.

Authority and relationships

  • Work closely with the COO/MLRO while retaining independent judgement and the ability to challenge.
  • Have access to the people, systems, files, records and governance forums needed to fulfil the role.
  • Maintain direct access to the CEO and appropriate Executive Management Team and Board forum where material, urgent or sensitive matters require escalation.
  • Business leaders remain accountable for the risks and controls within their own areas.

Key requirements

  • Risk, governance and compliance experience within a regulated or professionally governed organisation.
  • Expert practical knowledge of UK AML requirements, with estate agency experience strongly preferred.
  • Experience operating enterprise risk frameworks, assurance plans and Executive or Board reporting.
  • Strong working knowledge of UK data protection law and practical privacy governance.
  • Credibility, judgement and confidence to influence and challenge senior leaders.
  • Experience leading or developing others
  • Ability to satisfy applicable HMRC approval or fit-and-proper requirements.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against rettie-and-co's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on rettie-and-co's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    rettie-and-co's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.