Cyber Security Compliance Manager

Reed Technology; Lancashire; Hybrid; GBP 63,000 - 77,000; Full time

Benefits offered by this job

Excellent Benefits

Job summary

Reed Technology in Manchester seeks a Cyber Security Compliance Manager to drive governance and risk across the business. The role delivers enhanced GRC, PCI DSS compliance and AI governance initiatives within a hybrid work model, attending the office about every two weeks.

You will collaborate with auditors, suppliers and senior stakeholders to strengthen cyber security maturity and compliance across technology, risk, and governance functions.

Qualifications

• Experience in Cyber Security Governance, Risk & Compliance (GRC).
• Experience with auditors, suppliers and senior stakeholders.
• Familiarity with ISO 27001, PCI DSS, NIST and CIS Benchmarks; ISO 42001 is advantageous.

Responsibilities

• Managing and enhancing cyber security governance and compliance frameworks.
• Owning and developing the organisation's GRC platform.
• Leading PCI DSS compliance activities and supporting audit requirements.
• Managing supplier security assurance and third-party risk assessments.
• Advising projects and stakeholders on cyber security and compliance requirements.
• Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS.
• Producing meaningful risk and compliance reporting for senior stakeholders.
• Supporting governance activities around AI, Purview and other strategic technology initiatives.

Skills

GRC governance

Cyber security

Risk management

Stakeholder engagement

AI governance

Tools

GRC platform

Job description

Cyber Security Compliance Manager

Manchester/Hybrid - Office attendance approximately once every two weeks
Circa GBP70,000 + Excellent Benefits

A Cyber Security Compliance Manager is required to join a growing cyber security function at a pivotal stage of its transformation journey. The organisation is investing heavily in cyber security, governance and AI, with major initiatives including Microsoft Purview, Copilot adoption, AI governance programmes and wider cyber assurance improvements. The successful candidate will play a key role in ensuring compliance, strengthening governance frameworks and supporting the safe adoption of emerging technologies. This is a highly visible position sitting at the intersection of technology, governance and risk. You'll take ownership of compliance activities while helping shape the organisation's approach to cyber security and AI governance.

Key responsibilities include:

• Managing and enhancing cyber security governance and compliance frameworks.
• Owning and developing the organisation's GRC platform.
• Leading PCI DSS compliance activities and supporting audit requirements.
• Managing supplier security assurance and third-party risk assessments.
• Advising projects and stakeholders on cyber security and compliance requirements.
• Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS.
• Producing meaningful risk and compliance reporting for senior stakeholders.
• Supporting governance activities around AI, Purview and other strategic technology initiatives.

We're keen to speak with cyber security, risk, governance and compliance professionals who combine strong technical understanding with the ability to influence and engage stakeholders across the business.

You will likely have experience in:

• Cyber Security Governance, Risk & Compliance (GRC).
• Information Security or Cyber Security.
• Security Assurance or Risk Management.
• Infrastructure, Cloud or Security Operations environments.
• Compliance frameworks such as ISO 27001, CAF, PCI DSS, NIST and CIS Benchmarks.
• Working with auditors, suppliers and senior stakeholders.
• Experience of AI governance, ISO 42001 or modern Microsoft security technologies would be advantageous.

The successful candidate will be:

• A strong communicator who can build relationships across technical and non-technical teams.
• Comfortable challenging risk decisions and driving positive outcomes.
• Accountable, proactive and able to take ownership of key initiatives.
• Confident presenting governance and compliance information to stakeholders at all levels.
• Collaborative and passionate about improving cyber security maturity across an organisation.