Cyber Security Compliance Manager

We're looking for a Cyber Security Compliance Manager to play a key role in strengthening cyber governance, supplier assurance and security compliance across a large, complex organisation.

This is an excellent opportunity for a hands-on cyber assurance professional who enjoys working closely with suppliers, assessing security controls, managing risk, and ensuring compliance with recognised frameworks and standards.

• Leading cyber security compliance and assurance activities.
• Reviewing and assessing supplier security questionnaires and third-party security controls.
• Conducting supplier assurance reviews and challenging responses where required.
• Managing compliance against frameworks including ISO 27001, NIST, PCI DSS and related standards.
• Supporting the assessment and governance of emerging technologies, including AI and Generative AI solutions.
• Maintaining risk registers and driving remediation activities.
• Producing reports and recommendations for key stakeholders.
• Delivering security awareness initiatives and helping strengthen security culture across the organisation.
• Working closely with procurement, technology and business teams to minimise cyber risk.

• Strong experience in Cyber Security Governance, Risk & Compliance (GRC).
• Proven experience conducting supplier assurance reviews and assessing third-party security controls.
• Experience reviewing security questionnaires, risk assessments and supplier submissions.
• Good understanding of ISO 27001, NIST, PCI DSS and broader security frameworks.
• Knowledge of emerging technology risks, including AI, Microsoft Copilot and Generative AI.
• Ability to challenge technical controls and communicate risk effectively to both technical and non-technical stakeholders.
• Experience using GRC platforms and compliance tooling.
• Strong stakeholder management and communication skills.
• CISM, CISSP, CRISC or similar qualifications.
• Experience with in highly regulated environments such as healthcare, financial services, government or critical national infrastructure.
• Exposure to ISO 42001 or AI governance frameworks.

This role offers the opportunity to take ownership of cyber compliance and supplier assurance activities while influencing how emerging technologies are adopted securely within a highly regulated environment.

If you're currently working as a Cyber Security Compliance Manager, Security Assurance Manager, Third-Party Risk Manager, Supplier Assurance Manager or Cyber GRC Manager
, we'd love to hear from you.