Cyber Compliance Manager

Harvey Nash Group; Manchester; On-site; GBP 70,000 - 90,000; Full time

Job summary

Harvey Nash Group is seeking a Cyber Security Compliance Manager for a permanent role in Manchester, onsite twice per month. You will strengthen governance, risk management, supplier assurance and regulatory compliance across a complex IT environment.

You will lead GRC activities, manage supplier onboarding and due diligence, align controls to ISO 27001, manage risk registers and audits, and work with Security Operations and IT Infrastructure to drive continual improvement.

Qualifications

• Strong background in Cyber Security Governance, Risk & Compliance (GRC).
• Experience with supplier assurance, third-party risk management or vendor security assessments.
• Good knowledge of ISO 27001 and security control frameworks.
• Experience using GRC tooling to manage risk, controls and compliance activities.
• Understanding of cyber risk management and audit processes.
• Ability to engage with both technical and non-technical stakeholders.
• Previous IT Infrastructure experience would be highly advantageous.

Responsibilities

• Lead cyber security governance, risk and compliance (GRC) activities.
• Manage supplier assurance processes, including onboarding new vendors and conducting security due diligence.
• Review supplier security questionnaires and build relationships with third-party providers.
• Maintain and develop controls aligned to ISO 27001 and broader security standards.
• Manage cyber risk registers, assessments and remediation activities.
• Coordinate internal and external audits and compliance reviews.
• Collaborate with Security Operations and IT Infrastructure to ensure controls are effective.
• Run security awareness initiatives, including phishing simulations.
• Collaborate across Information Security and wider business to drive continual improvement.

Skills

Cyber GRC

Supplier assurance

Vendor security assessments

ISO 27001

GRC tooling

Cyber risk management

Audit processes

Stakeholder engagement

IT infrastructure

Job description

Cyber Security Compliance Manager / Permanent/ Manchester (Onsite Twice Per Month)

We're supporting an organisation looking for a Cyber Security Compliance Manager to help strengthen security governance, risk management, supplier assurance and regulatory compliance across a complex IT environment.

The Role

You'll work across Information Security and IT teams to ensure robust security controls, compliance processes and risk management practices are embedded throughout the organisation.

Key responsibilities include:

• Leading cyber security governance, risk and compliance (GRC) activities.
• Managing supplier assurance processes, including onboarding new vendors and conducting security due diligence.
• Reviewing supplier security questionnaires and building strong relationships with third-party providers.
• Maintaining and developing controls aligned to ISO 27001 and broader security standards.
• Managing cyber risk registers, assessments and remediation activities.
• Coordinating internal and external audits and compliance reviews.
• Working closely with Security Operations and IT Infrastructure teams to ensure controls are effective.
• Running security awareness initiatives, including phishing simulation exercises.
• Collaborating with colleagues across Information Security and wider business functions to drive continual improvement.

About You

• Strong background in Cyber Security Governance, Risk & Compliance (GRC).
• Experience with supplier assurance, third-party risk management or vendor security assessments.
• Good knowledge of ISO 27001 and security control frameworks.
• Experience using GRC tooling to manage risk, controls and compliance activities.
• Understanding of cyber risk management and audit processes.
• Ability to engage with both technical and non-technical stakeholders.
• Previous IT Infrastructure experience would be highly advantageous.

If you're an experienced Cyber Security GRC professional looking for a role with a broad remit covering compliance, supplier assurance and risk management, we'd love to hear from you.