Job Search

We are seeking an experienced IT Security & Compliance Manager to lead the development, implementation and continuous improvement of information security and compliance practices across the organisation. This role will be responsible for protecting systems, data and technology services while ensuring that security controls align with applicable legislation, regulatory requirements, industry standards and business objectives. You will work closely with technology, risk, legal, privacy and operational teams to promote a strong, practical and organisation-wide security culture.

Key responsibilities include maintaining and improving the information security management framework; developing policies, standards, procedures and control documentation; coordinating risk assessments, control testing and remediation activities; and monitoring compliance with relevant requirements such as ISO 27001, SOC 2, GDPR and other applicable frameworks. You will manage internal and external audits, track findings through to resolution, prepare compliance reports and provide clear updates to senior stakeholders. The role will also oversee security incident management, vulnerability and patch management, access governance, third-party risk assessments, business continuity requirements and security awareness initiatives. You will help define meaningful security metrics and support the ongoing improvement of governance, risk and compliance processes.

The successful candidate will have proven experience in information security, IT risk, governance or compliance, ideally within a regulated or technology-focused environment. A strong understanding of security frameworks, audit principles, data protection requirements and risk management methodologies is essential, along with the ability to translate technical issues into clear business recommendations. Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor would be advantageous. You should be analytical, well organised and confident engaging with stakeholders at all levels. Strong communication, influencing and problem-solving skills are required, together with a proactive approach and the ability to manage multiple priorities in a changing environment.