
Enable job alerts via email!
Generate a tailored resume in minutes
Land an interview and earn more. Learn more
A leading educational institution in the UK is seeking a Cyber Governance Manager to establish and maintain a robust cyber governance framework. The role involves developing and implementing cyber security policies, managing vulnerabilities, and acting as a point of contact for auditors. The ideal candidate will possess strong knowledge of cyber governance frameworks, excellent communication skills, and experience in risk reporting. This position offers flexible working arrangements.
This is an exciting opportunity to lead on cyber governance across Northumbria University as our Cyber Governance Manager. You will be responsible for establishing and maintaining a strong cyber governance framework, ensuring that all cyber security policies, processes, risk decisions, controls and audit actions are properly owned, measured and adhered to. You will own activities arising from internal, external and regulatory audits, working to reduce the University's cyber risk exposure, improve responsibilities and accountabilities, and achieve sustained alignment with the NCSC Cyber Assessment Framework (CAF). Based in Newcastle upon Tyne and London, we are an on‑campus organisation and offer flexible hours and location where the role allows. We pride ourselves on diversity and inclusivity, holding numerous awards for gender and race equality, disability confidence and research excellence.
Key responsibilities include developing and maintaining cyber security policies, SOPs and standards with appropriate governance approval and scheduled reviews, driving policy adoption across Digital Technology and Transformation Services (DTT) and system‑owning teams. You will provide oversight for vulnerability management activities, produce regular risk and vulnerability reporting for senior management and work closely with the Head of Cyber Security to design and maintain reporting mechanisms for cyber risk, vulnerabilities, patching, and identity lifecycle management. You will act as the primary point of contact for auditors on cyber governance matters.