Global Risk and Compliance Manager

ABOUT ELIXIRR: Elixirr International plc is a global consulting firm with a bold ambition: to become the best consulting firm in the world. Founded in 2009 to challenge a declining industry standard, we’ve grown from a single vision into a powerhouse of entrepreneurial talent, delivering boardroom strategy through to execution. After IPO-ing on AIM in July 2020, Elixirr moved to the Main Market of the London Stock Exchange in July 2025. In that time, our market cap has grown from £98 million to over £350 million – a testament to our differentiated approach and relentless pursuit of excellence. With a presence across the UK, US, EU, and South Africa, and a client base spanning industries and geographies, we’ve welcomed seven boutique firms into the Group. This has broadened our capabilities across creative, digital marketing, data and AI, procurement, transformation, and more. Our vision of becoming a services unicorn is firmly within reach – and this is just the beginning. We’re looking for exceptional talent to join us on this exciting growth journey and shape the future of consulting. Location Our headquarters are in Central London. It’s where it all began for us and continues to be a hub of innovation and growth. The Role Combining the agility of a challenger firm with the governance standards of a listed company, we are now seeking an ambitious, commercially astute Global Risk Compliance Manager to build and scale our global risk and compliance capability, working closely with Legal, IT, Operations and senior leadership. You will be responsible for the end-to-end risk and compliance framework for the Group, ensuring governance is robust, commercially pragmatic, audit-ready and scalable across operating companies and acquisitions. This role offers a genuine opportunity to build and scale a global risk and compliance function within an entrepreneurial, Main Market-listed environment. Key Responsibilities Enterprise Risk, Cyber Governance • Manage and enhance the Group’s enterprise risk framework, global risk register and full risk lifecycle (identification, mitigation, testing, remediation and reporting). • Maintain a Group-wide consolidated view of strategic, operational, financial, regulatory and cyber risks, including horizon scanning across jurisdictions. • Reduce cyber risk exposure and strengthen cybersecurity governance in partnership with the CISO, aligning to global standards e.g. ISO 27001, SOC 2. • Contribute to Board, Audit Committee and Annual Report risk disclosures. Risk Compliance Operations • Lead the Group’s risk and compliance programme, ensuring controls are well-designed, operational and scalable, particularly for SOC 2 Type 2 and ISO 27001. • Maintain a centralised, audit-ready evidence repository and coordinate internal/external audits, client reviews and due diligence. • Oversee remediation plans and ensure continuous evidence collection. • Develop consistent, lightweight playbooks for vendor intake, audit readiness and control testing across operating companies. Policy, Regulatory Third-Party Oversight • Oversee global policies and the full policy lifecycle, ensuring alignment with regulatory and listing obligations. • Manage and deliver risk and compliance training, including competency testing where appropriate. • Support global data protection compliance (GDPR, CCPA and equivalents) as a data processor/service provider. • Own vendor and third-party risk management, ensuring proportionate due diligence of suppliers, clients and acquisition targets. Reporting Stakeholder Leadership • Deliver executive reporting on risk posture, KPIs, exceptions, remediation and audit milestones. • Act as the bridge between IT/Security, Legal, HR, Finance, M A and Operations leadership, driving accountability without a policing approach. Experience Qualifications We are seeking someone who combines technical depth with commercial judgement. Essential • 5+ years’ experience in risk, compliance, audit or governance roles within professional services, consulting, technology or a listed environment. • Strong experience managing risk registers, control frameworks, remediation plans and executive reporting. • Working knowledge and experience supporting or managing SOC 2, ISO 27001/27002, NIST CSF or similar certification processes. • Practical understanding and experience of global data protection and supplier risk requirements. • Experience translating and documenting technical controls and regulatory requirements into operational practice in partnership with technical teams. Desirable • Experience in a fast-growth or acquisition-heavy environment. • Understanding of cybersecurity governance and information security risk management. • Law or business-related degree (regulatory legal background advantageous). • Professional compliance qualification. • Experience within consulting or professional services. About You • Intellectually curious and strategically minded. • Commercially pragmatic, balancing robust risk management with entrepreneurial growth. • Comfortable in a fast-paced, international, high-growth environment. • Highly organised and disciplined in documentation and evidence management. • Strong executive presence with the ability to influence senior stakeholders. • Motivated by building and scaling processes rather than maintaining the status quo.