Governance, Risk, Compliance & Quality (Senior) Specialist

We are looking for an experienced Governance, Risk, Compliance & Quality (Senior) Specialist to take ownership of the development and continuous improvement of the ZIRA Business Management System. The ZIRA Business Management System provides the company-wide framework for managing processes, quality, information security, risk, compliance, controls and continuous quality improvement.

It currently supports our ISO 9001 and ISO/IEC 27001 certifications. The GRCQ (Senior) Specialist will ensure that the Business Management System continuously evolves in line with relevant quality management principles, industry standards, regulatory obligations, contractual

commitments, and customer expectations. The role is crucial in strengthening organization-wide quality practices, ensuring that quality is embedded in day-to-day operations rather than limited to certification maintenance.

We are looking for someone capable of helping us prepare for new and increasingly demanding governance, security and compliance requirements, as well as someone who can think beyond individual standards and certifications and help us maintain a practical, effective and scalable management and governance framework.

• Own and continuously improve our Business Management System, including its structure and documentation.

• Champion a culture of total quality management and continuous improvement, using internal audits and regular check-ins to identify opportunities for improvement, not just to verify compliance.

• Organize security and quality management awareness training for employees, helping build company-wide understanding of relevant risks and responsibilities.

• Work with process owners to define, monitor and report quality and process-performance KPIs, using trends to prioritize improvement.

• Coordinate governance, risk, compliance, quality and information security governance activities across the company.

• Establish and maintain company-wide governance principles for processes, policies, risks, controls and compliance.

• Maintain the company-wide risk and control framework, coordinate periodic risk assessments and reviews, and track risk treatment actions with accountable owners.

• Work with teams across the company to ensure that processes, responsibilities and controls are clearly defined and effective.

• Coordinate the Quality Management Working Group and ISMS Team, aligning quality and information security initiatives with the Business Management System.

• Identify new industry, regulatory, contractual and customer requirements and coordinate their incorporation into the existing Business Management System.

• Coordinate internal and external audits, certifications and other assurance activities.

• Track findings, corrective actions and improvement activities through closure, with accountable process owners responsible for implementation.

• Ensure that appropriate evidence is maintained to demonstrate compliance and control effectiveness, turning results into practical insights that support continuous improvement.

• Work with technical teams on information security governance, including cybersecurity regulatory compliance, and oversight of security controls.

• Coordinate governance, reporting and post-incident improvement activities for information security incidents, while technical teams lead investigation, containment and remediation.

• Develop and maintain information security policies and procedures, ensuring they remain current and fit for purpose.

• Support customer security and compliance assessments and RFPs.

• Monitor emerging requirements and assess readiness for new standards, certifications and regulatory obligations.

• Provide management with a clear view of significant risks, compliance status and areas requiring attention.

• Promote practical continuous improvement while avoiding unnecessary compliance bureaucracy.

What we're looking for

We are looking for someone with solid experience in areas such as governance, risk, compliance, information security governance, quality management, continuous improvement, audit or management systems, with an understanding of Total Quality Management (TQM) principles and their application across the organization.

You should have:

• 7+ years of relevant professional experience, in leading or actively contributing to a culture of continuous improvement and quality (e.g., through internal audits, process reviews or improvement programs), not just maintaining certifications;

• relevant university degree (e.g., information technology, information security, industrial engineering, economics, management, business administration or a related field); equivalent professional experience will also be considered;

• experience developing, maintaining or improving management, governance or compliance frameworks;

• good understanding of risk management, internal controls, audit, Total Quality Management (TQM) principles and continuous process improvement;

• experience translating external requirements into practical company policies, processes and controls;

• working knowledge of ISO 9001 and ISO/IEC 27001 (the standards currently maintained by the company);

• broader experience with recognized quality management, information security or compliance standards and external assessments, with working knowledge of applicable cybersecurity and data protection regulations and familiarity with recognized cybersecurity frameworks; 

• ability to work effectively with both technical and business teams;

• ability to promote a company-wide quality culture through process ownership, cross-functional collaboration, customer focus and continuous improvement initiatives;

• strong analytical, organizational and communication skills, including the ability to turn audit and monitoring results into clear, actionable insights for management;

• strong attention to detail, combined with the ability to see the bigger picture and its impact on the business;

• professional working proficiency in English;

• a high degree of integrity and discretion when working with sensitive and confidential information.

Experience working with multiple security, quality or compliance frameworks would be a strong advantage, as would relevant professional certifications such as ISO 9001 Lead Auditor/Lead Implementer, ISO/IEC 27001 Lead Auditor/Lead Implementer, CISA, CISM, CRISC, or Lean/Six Sigma.

Responsibility model

The role reports to the Operations Director and works across the entire organization. GRCQ (Senior) Specialist provides oversight, coordinates activities, monitors compliance and control effectiveness, identifies gaps and escalates significant risks or unresolved issues to management. The role owns and coordinates the framework, while individual teams remain responsible for acting upon findings, operating their processes and implementing their controls.

What’s in it for you

As you move through the interview process, we’ll share all the details about our benefits and career development opportunities. Here are some key highlights: 

• A collaborative, flexible, and respectful work environment

• Competitive salary with opportunities for growth 

• Private health insurance 

• Hybrid work options for a better work-life experience and balance 

• Access to any ZIRA office worldwide based on business needs 

• Personal education budget to support your professional development 

• A commitment to diversity and inclusion, with a diverse team and active engagement in social and charitable initiatives 

• Gym membership reimbursement to support your well-being 

• Access to innovative technical tools and technologies 

We’re dedicated to fostering both personal and professional growth. We go beyond the basics, offering a supportive environment that includes sports and recreational activities. Our comprehensive approach ensures a fulfilling experience for every member of the ZIRA team.

Join ZIRA—where good ideas find people who care enough to make them real.