Cyber Compliance Manager

Cyber UK; Manchester; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

Cyber UK is seeking a Cyber Security Compliance Manager for a permanent role in Manchester. The role spans governance, risk and supplier assurance across a complex IT environment, reporting to the security leadership and collaborating across Information Security and IT teams.

You will lead GRC activities, manage supplier due diligence, and ensure controls align with ISO 27001 and related standards while coordinating audits and security awareness initiatives.

Qualifications

• Proven experience in Cyber Security GRC.
• Knowledge of ISO 27001 and related controls.
• Experience with supplier risk management and vendor assessments.
• Familiarity with audits and control remediations.

Responsibilities

• Lead cyber security governance, risk and compliance activities.
• Manage supplier assurance processes and third-party risk.
• Review supplier security questionnaires and perform due diligence.
• Maintain and develop controls aligned to ISO 27001 and standards.
• Maintain cyber risk registers and remediation activities.
• Coordinate internal and external audits and reviews.
• Collaborate with IT and security teams to ensure effective controls.
• Promote security awareness and phishing simulations.
• Engage stakeholders across the business to drive improvements.

Skills

GRC governance

Supplier assurance

Vendor security assessments

ISO 27001 knowledge

Audit & controls

Stakeholder engagement

Tools

GRC tooling

Job description

Cyber Security Compliance Manager / Permanent / Manchester (Onsite Twice Per Month) We’re supporting an organisation looking for a Cyber Security Compliance Manager to help strengthen security governance, risk management, supplier assurance and regulatory compliance across a complex IT environment.

The Role

You’ll work across Information Security and IT teams to ensure robust security controls, compliance processes and risk management practices are embedded throughout the organisation.

Key responsibilities include

• Leading cyber security governance, risk and compliance (GRC) activities.
• Managing supplier assurance processes, including onboarding new vendors and conducting security due diligence.
• Reviewing supplier security questionnaires and building strong relationships with third-party providers.
• Maintaining and developing controls aligned to ISO 27001 and broader security standards.
• Managing cyber risk registers, assessments and remediation activities.
• Coordinating internal and external audits and compliance reviews.
• Working closely with Security Operations and IT Infrastructure teams to ensure controls are effective.
• Running security awareness initiatives, including phishing simulation exercises.
• Collaborating with colleagues across Information Security and wider business functions to drive continual improvement.

About You

• Strong background in Cyber Security Governance, Risk & Compliance (GRC).
• Experience with supplier assurance, third-party risk management or vendor security assessments.
• Good knowledge of ISO 27001 and security control frameworks.
• Experience using GRC tooling to manage risk, controls and compliance activities.
• Understanding of cyber risk management and audit processes.
• Ability to engage with both technical and non-technical stakeholders.
• Previous IT Infrastructure experience would be highly advantageous.

If you’re an experienced Cyber Security GRC professional looking for a role with a broad remit covering compliance, supplier assurance and risk management, we’d love to hear from you.