Cyber GRC & Compliance Lead — Vendor Risk

Cyber UK; Manchester; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

Cyber UK is seeking a Cyber Security Compliance Manager for a permanent role in Manchester. The role spans governance, risk and supplier assurance across a complex IT environment, reporting to the security leadership and collaborating across Information Security and IT teams.

You will lead GRC activities, manage supplier due diligence, and ensure controls align with ISO 27001 and related standards while coordinating audits and security awareness initiatives.

Qualifications

• Proven experience in Cyber Security GRC.
• Knowledge of ISO 27001 and related controls.
• Experience with supplier risk management and vendor assessments.
• Familiarity with audits and control remediations.

Responsibilities

• Lead cyber security governance, risk and compliance activities.
• Manage supplier assurance processes and third-party risk.
• Review supplier security questionnaires and perform due diligence.
• Maintain and develop controls aligned to ISO 27001 and standards.
• Maintain cyber risk registers and remediation activities.
• Coordinate internal and external audits and reviews.
• Collaborate with IT and security teams to ensure effective controls.
• Promote security awareness and phishing simulations.
• Engage stakeholders across the business to drive improvements.

Skills

GRC governance

Supplier assurance

Vendor security assessments

ISO 27001 knowledge

Audit & controls

Stakeholder engagement

Tools

GRC tooling

Job description

Cyber UK is seeking a Cyber Security Compliance Manager for a permanent role in Manchester. The role spans governance, risk and supplier assurance across a complex IT environment, reporting to the security leadership and collaborating across Information Security and IT teams.

You will lead GRC activities, manage supplier due diligence, and ensure controls align with ISO 27001 and related standards while coordinating audits and security awareness initiatives.