Cyber Security Compliance Manager

Harvey Nash; Manchester; On-site; GBP 60,000 - 90,000; Full time

Job summary

Harvey Nash is seeking a Cyber Security Compliance Manager in Manchester (Onsite Twice Per Month) to strengthen governance, risk management and supplier assurance within a complex IT environment.

The role involves coordinating audits, maintaining ISO 27001-aligned controls and driving security awareness across the organisation with both technical and non-technical stakeholders.

Qualifications

• Strong background in Cyber Security GRC.
• Experience with supplier assurance or third-party risk.
• Good knowledge of ISO 27001 and control frameworks.
• Experience using GRC tooling to manage risk and compliance.
• Understanding of cyber risk management and audit processes.
• Ability to engage with technical and non-technical stakeholders.
• IT Infrastructure experience is advantageous.

Responsibilities

• Lead cyber security governance, risk and compliance (GRC) activities.
• Manage supplier assurance processes and third-party due diligence.
• Review supplier security questionnaires and build vendor relationships.
• Maintain controls aligned to ISO 27001 and standards.
• Manage cyber risk registers, assessments and remediation.
• Coordinate internal and external audits and reviews.
• Collaborate with Security Operations and IT teams to ensure effective controls.
• Run security awareness initiatives, including phishing simulations.
• Drive continual improvement across information security and business functions.

Job description

Cyber Security Compliance Manager / Permanent/ Manchester (Onsite Twice Per Month)

We're supporting an organisation looking for a Cyber Security Compliance Manager to help strengthen security governance, risk management, supplier assurance and regulatory compliance across a complex IT environment.

The Role

You'll work across Information Security and IT teams to ensure robust security controls, compliance processes and risk management practices are embedded throughout the organisation.

Key responsibilities include:

• Leading cyber security governance, risk and compliance (GRC) activities.
• Managing supplier assurance processes, including onboarding new vendors and conducting security due diligence.
• Reviewing supplier security questionnaires and building strong relationships with third-party providers.
• Maintaining and developing controls aligned to ISO 27001 and broader security standards.
• Managing cyber risk registers, assessments and remediation activities.
• Coordinating internal and external audits and compliance reviews.
• Working closely with Security Operations and IT Infrastructure teams to ensure controls are effective.
• Running security awareness initiatives, including phishing simulation exercises.
• Collaborating with colleagues across Information Security and wider business functions to drive continual improvement.

About You

• Strong background in Cyber Security Governance, Risk & Compliance (GRC).
• Experience with supplier assurance, third-party risk management or vendor security assessments.
• Good knowledge of ISO 27001 and security control frameworks.
• Experience using GRC tooling to manage risk, controls and compliance activities.
• Understanding of cyber risk management and audit processes.
• Ability to engage with both technical and non-technical stakeholders.
• Previous IT Infrastructure experience would be highly advantageous.

If you're an experienced Cyber Security GRC professional looking for a role with a broad remit covering compliance, supplier assurance and risk management, we'd love to hear from you.