Cyber GRC Lead: Compliance, Risk & Supplier Assurance

Harvey Nash Group; Manchester; On-site; GBP 70,000 - 90,000; Full time

Job summary

Harvey Nash Group is seeking a Cyber Security Compliance Manager for a permanent role in Manchester, onsite twice per month. You will strengthen governance, risk management, supplier assurance and regulatory compliance across a complex IT environment.

You will lead GRC activities, manage supplier onboarding and due diligence, align controls to ISO 27001, manage risk registers and audits, and work with Security Operations and IT Infrastructure to drive continual improvement.

Qualifications

• Strong background in Cyber Security Governance, Risk & Compliance (GRC).
• Experience with supplier assurance, third-party risk management or vendor security assessments.
• Good knowledge of ISO 27001 and security control frameworks.
• Experience using GRC tooling to manage risk, controls and compliance activities.
• Understanding of cyber risk management and audit processes.
• Ability to engage with both technical and non-technical stakeholders.
• Previous IT Infrastructure experience would be highly advantageous.

Responsibilities

• Lead cyber security governance, risk and compliance (GRC) activities.
• Manage supplier assurance processes, including onboarding new vendors and conducting security due diligence.
• Review supplier security questionnaires and build relationships with third-party providers.
• Maintain and develop controls aligned to ISO 27001 and broader security standards.
• Manage cyber risk registers, assessments and remediation activities.
• Coordinate internal and external audits and compliance reviews.
• Collaborate with Security Operations and IT Infrastructure to ensure controls are effective.
• Run security awareness initiatives, including phishing simulations.
• Collaborate across Information Security and wider business to drive continual improvement.

Skills

Cyber GRC

Supplier assurance

Vendor security assessments

ISO 27001

GRC tooling

Cyber risk management

Audit processes

Stakeholder engagement

IT infrastructure

Job description

Harvey Nash Group is seeking a Cyber Security Compliance Manager for a permanent role in Manchester, onsite twice per month. You will strengthen governance, risk management, supplier assurance and regulatory compliance across a complex IT environment.

You will lead GRC activities, manage supplier onboarding and due diligence, align controls to ISO 27001, manage risk registers and audits, and work with Security Operations and IT Infrastructure to drive continual improvement.