Information Technology Governance Manager

Take ownership of governance, risk and compliance (GRC) within a security-focused technology environment.

You will work closely with senior stakeholders to strengthen risk management, maintain regulatory compliance and support the organisation's wider security and resilience objectives.

Key Responsibilities:

• Develop, implement and maintain GRC policies, frameworks and processes
• Manage enterprise risk assessments and the organisational risk register
• Identify, assess, and monitor operational, regulatory, cybersecurity, financial, and third-party risks
• Lead both internal and external audit activity and oversee remediation of findings
• Provide GRC reporting and advice to senior management and lead training programs on GRC

Requirements:

• Extensive experience in GRC, audit, information security and related disciplines
• Strong knowledge of risk management, regulatory frameworks and compliance
• Experience with enterprise risk, internal controls and audit processesGDPR experience, including ROPA, LIA and DPIA
• Experience with GRC or risk management platforms
• Strong analytical, communication and stakeholder management skills
• British Nationals with existing security clearance or eligibility to obtain high-level clearance
• Experience with Defence Cyber Certification (DCC) and/or CE/CE+ certification
• Understanding of Secure by Design (SbD) or JSP 453
• Knowledge of NIS2, SOC 2 and vendor risk management
• CISA, CRISC, CISM or CISSP certification

• Professional development and training, exposure to complex security and compliance environments, and the opportunity to make a significant impact within a specialist technology organisation.

Due to the nature of the work, successful applicants must be British Nationals eligible to hold or obtain the appropriate security clearance.