Cyber Security Compliance Lead

Notting Hill Genesis; United Kingdom; Hybrid; GBP 55,000 - 75,000; Full time

Job summary

A leading housing association in the UK is seeking a Cyber Security Compliance Lead to enhance its governance and compliance frameworks. This role involves defining security policies, managing audits, and ensuring compliance with legislation such as UK GDPR and PCI-DSS. The successful candidate will need to have significant experience in cyber governance and possess relevant qualifications like CISSP. Hybrid working is available, with at least two days in the office.

Benefits

Excellent annual leave allowance

Generous pension scheme

Enhanced maternity/paternity/adoption pay

Employee assistance

Health cash plan

Staff discounts

Interest-free loans

Cycle to work scheme

Life Assurance – 4x annual salary

Qualifications

• Substantial experience in a cyber governance, risk, or compliance role.
• Strong working knowledge of ISO27001, NIST 800-53, and Cyber Essentials Plus accreditation.
• Experience of vulnerability and risk management processes.

Responsibilities

• Define and maintain cyber security policies and procedures.
• Lead and coordinate cyber audits and vulnerability management.
• Manage governance and oversight of risk management processes.

Skills

Cyber governance

Risk management

Compliance frameworks

Data protection legislation

Education

CISSP or equivalent professional qualification

Tools

ISO27001

NIST

Cyber Essentials Plus

Job description

Job Introduction

Cyber Security Compliance Lead

Join us and help protect the data that protects our residents. At Notting Hill Genesis (NHG), we're on a mission to ensure our systems and data are resilient, compliant, and secure - protecting the trust of over 60,000 residents across London. As Cyber Security Compliance Lead, you'll be at the forefront of our efforts to strengthen governance, manage risk, and maintain compliance across our digital landscape.

You will work closely with colleagues across the organisation to embed security standards, manage frameworks such as NIST, ISO27001, and Cyber Essentials, and ensure we meet evolving regulatory expectations. This is a key role where your expertise will shape our cyber resilience and make security a proactive business enabler.

What you'll do

• Define and maintain cyber security policies and procedures, ensuring compliance with key frameworks such as NIST, ISO27001, and Cyber Essentials Plus.
• Lead and coordinate cyber audits, vulnerability management, penetration testing, and disaster recovery oversight.
• Manage governance and oversight of risk management processes, ensuring SLAs and compliance objectives are achieved.
• Communicate cyber security goals and performance to senior management and governance committees.
• Monitor supplier security performance and risk, ensuring third-party assurance.
• Stay current with changes to legislation and standards, including UK GDPR, DPA, and PCI-DSS.
• Support the development of strategic compliance plans and cyber maturity roadmaps to improve visibility, resilience, and trust.
• Collaborate with Governance, Risk, and Data Protection teams to maintain alignment and best practice across NHG.

Hybrid working is available, with at least two days a week based in an office or site location, and the remainder from home where appropriate.

All about you

You're a passionate and proactive security professional with the technical depth and leadership to make a difference. You combine a solid understanding of compliance frameworks with the ability to engage, influence, and drive continuous improvement across diverse teams.

Essential experience and qualifications

• CISSP (or equivalent) professional qualification.
• Substantial experience in a cyber governance, risk, or compliance role.
• Strong working knowledge of ISO27001, NIST 800-53, and Cyber Essentials Plus accreditation.
• Experience of vulnerability and risk management processes.
• Working understanding of data protection legislation including UK GDPR, DPA, and PCI-DSS.
• Experience engaging with security and threat intelligence networks such as NCSC.
• Project management qualification (Prince2, Agile) preferred.

Behaviours for success

• Compassionate – putting people and residents at the heart of decisions.
• Progressive – striving for continuous improvement and innovation.
• Dependable – consistently delivering high‑quality, reliable outcomes.
• Inclusive – valuing diversity and collaboration across all teams.
• Empowered – enabling others to achieve their best.

What's in it for you

Once you join us, you'll find plenty of opportunities to grow within our organisation. You’ll also have access to a wide range of learning and development options to help you achieve and maximise your potential.

Benefits

• Excellent annual leave allowance and flexible working opportunities (qualifying period may apply)
• Generous pension scheme
• Enhanced maternity, paternity, and adoption pay (qualifying period may apply)
• Employee assistance – free confidential advice and counselling services
• Health cash plan
• Staff discounts across hundreds of retailers, gyms, restaurants, and entertainment venues
• Interest‑free loans (season ticket, tenancy deposit, and training loans)
• Cycle to work scheme
• Life Assurance – 4x annual salary

All about us

Notting Hill Genesis (NHG) is one of London's leading housing associations, providing affordable homes for Londoners. We are both a landlord and a developer, with more than 60,000 existing homes and 10,000 more in our pipeline, employing around 1,500 staff. To learn more about who we are and what makes us different, visit https://group.nhg.org.uk/careers/.

We welcome applications from everyone and actively promote diversity and inclusion across all levels of the organisation. We are proud to be a Stonewall Diversity Champion and a Disability Confident Employer.

Find out more about our approach to equality, diversity and inclusion: https://group.nhg.org.uk/careers/diversity-is-our-strength/

Selection Process

Step 1: If you are interested, please send your application now!

Step 2: Attend an interview with the selection panel and complete an assessment.

Please apply for this role online. If you are unable to apply online or require reasonable adjustments due to a disability or medical condition, please contact [e-mail].

If a redeployee applies for this role, their application will be considered before others.

NHG reserves the right to close this vacancy early if sufficient applications are received, so we encourage early applications.