Security Governance, Risk & Compliance Manager
We are seeking an experienced Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance programmes. This role will provide strategic direction while working closely with technology, legal, privacy, internal audit and business teams to ensure security controls support operational objectives and regulatory obligations. You will help promote a strong culture of security, accountability and continuous improvement across the organisation.
Key responsibilities will include developing and maintaining security policies, standards, procedures and control frameworks; managing information security and technology risk assessments; maintaining risk registers and overseeing mitigation plans; and coordinating internal and external audits, assessments and certifications. You will monitor regulatory and industry developments, assess their impact, and support the implementation of appropriate controls. The role will also involve preparing governance reports, dashboards and management information, facilitating security and risk committees, supporting third-party risk reviews, and coordinating responses to customer, supplier and regulatory due diligence requests. You will contribute to incident management, business continuity and resilience activities where governance or compliance expertise is required.
The successful candidate will have substantial experience in information security governance, risk and compliance, ideally within a regulated, technology-led or complex enterprise environment. You will have strong knowledge of recognised frameworks and standards such as ISO 27001, NIST, COBIT or equivalent, together with an understanding of data protection, operational resilience and third-party risk requirements. Relevant professional certifications, such as CISM, CISSP, CRISC, CISA or ISO 27001 Lead Implementer/Auditor, are desirable. Excellent communication, influencing and analytical skills are essential, along with the ability to translate technical risks into clear business implications and practical actions. You will be organised, commercially aware and confident engaging with stakeholders at all levels while managing multiple priorities in a changing environment.
Security Governance, Risk & Compliance Manager
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer