Cyber Security Compliance Manager

Manchester (Hybrid)
Up to £75,000
Permanent

We're seeking an experienced Cyber Security Compliance Manager to play a key role in strengthening cyber security governance, compliance and supplier assurance across a complex technology environment.

This is an excellent opportunity for someone with a strong background in Governance, Risk & Compliance (GRC) who enjoys working across cyber security, technology, suppliers and business stakeholders.

Key responsibilities include:

• Leading cyber security governance, risk and compliance activities.
• Managing supplier assurance and third-party security risk assessments.
• Reviewing vendor security questionnaires and conducting security due diligence.
• Maintaining and improving compliance with frameworks such as ISO
  27001.
• Managing cyber risk registers and remediation activities.
• Supporting internal and external audits.
• Developing and maintaining security policies, standards and controls.
• Delivering security awareness initiatives, including phishing simulation programmes.
• Producing governance and compliance reporting for senior stakeholders.
• Working closely with Security Operations and IT Infrastructure teams.

We're interested in speaking with candidates who have:

• Experience with in Cyber Security Governance, Risk & Compliance (GRC).
• Strong understanding of ISO
  27001 and information security management systems.
• Experience managing supplier assurance, vendor assessments or third-party risk.
• Background in risk management, compliance and audit activities.
• Experience reviewing supplier security questionnaires and conducting due diligence.
• Strong stakeholder engagement and communication skills.
• Experience working within regulated environments.

• ISO
  27001 Lead Auditor or Lead Implementer certification.
• CISSP, CISM, CRISC or similar security qualifications.
• Knowledge of emerging technology risks, including cloud and AI governance.
• Experience with GRC tools and platforms.

• Salary up to £75,000
• Hybrid working
• Excellent benefits package
• Broad remit covering supplier assurance, cyber risk and compliance
• Opportunity to influence cyber security governance across a large organisation
• High-profile role working with stakeholders across technology and the wider business

If you're looking for a role combining supplier assurance, third-party risk, ISO
27001, governance and cyber compliance
, we'd be keen to hear from you.