Cyber Security Compliance Manager

Reed Technology; Manchester; Hybrid; GBP 63,000 - 77,000; Full time

Job summary

Reed Technology is hiring a Cyber Security Compliance Manager in Manchester with a hybrid work pattern (office attendance roughly every two weeks). The role focuses on governance, risk and compliance across cyber security and AI initiatives.

You will own the organisation's GRC activities, support audits, and drive assurance across suppliers and third parties. The ideal candidate will combine strong technical security knowledge with the ability to influence stakeholders and shape governance and

Qualifications

• GRC expertise and practical experience leading governance, risk and compliance programmes.
• Strong ability to engage stakeholders across technical and non-technical teams.
• Experience with audits and supplier risk assessments is desirable.

Responsibilities

• Manage and enhance cyber security governance and compliance frameworks.
• Own and develop the organisation's GRC platform.
• Lead PCI DSS compliance activities and support audit requirements.
• Manage supplier security assurance and third-party risk assessments.
• Advise projects on cyber security and compliance requirements.
• Support ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS.

Skills

GRC

Stakeholder engagement

Auditing

AI governance

Cloud security

Risk management

Tools

ISO 27001

NIST

Job description

Cyber Security Compliance Manager

Manchester/Hybrid - Office attendance approximately once every two weeks

Circa £70,000 + Excellent Benefits

A Cyber Security Compliance Manager is required to join a growing cyber security function at a pivotal stage of its transformation journey. The organisation is investing heavily in cyber security, governance and AI, with major initiatives including Microsoft Purview, Copilot adoption, AI governance programmes and wider cyber assurance improvements. The successful candidate will play a key role in ensuring compliance, strengthening governance frameworks and supporting the safe adoption of emerging technologies.

This is a highly visible position sitting at the intersection of technology, governance and risk. You'll take ownership of compliance activities while helping shape the organisation's approach to cyber security and AI governance.

Key responsibilities include:

• Managing and enhancing cyber security governance and compliance frameworks.
• Owning and developing the organisation's GRC platform.
• Leading PCI DSS compliance activities and supporting audit requirements.
• Managing supplier security assurance and third-party risk assessments.
• Advising projects and stakeholders on cyber security and compliance requirements.
• Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS.
• Producing meaningful risk and compliance reporting for senior stakeholders.
• Supporting governance activities around AI, Purview and other strategic technology initiatives.

We're keen to speak with cyber security, risk, governance and compliance professionals who combine strong technical understanding with the ability to influence and engage stakeholders across the business.

You will likely have experience in:

• Cyber Security Governance, Risk & Compliance (GRC).
• Information Security or Cyber Security.
• Security Assurance or Risk Management.
• Infrastructure, Cloud or Security Operations environments.
• Compliance frameworks such as ISO 27001, CAF, PCI DSS, NIST and CIS Benchmarks.
• Working with auditors, suppliers and senior stakeholders.
• Experience of AI governance, ISO 42001 or modern Microsoft security technologies would be advantageous.

The successful candidate will be:

• A strong communicator who can build relationships across technical and non-technical teams.
• Comfortable challenging risk decisions and driving positive outcomes.
• Accountable, proactive and able to take ownership of key initiatives.
• Confident presenting governance and compliance information to stakeholders at all levels.
• Collaborative and passionate about improving cyber security maturity across an organisation.

If you're looking for an opportunity to influence cyber security, governance and AI strategy while working on high-profile transformation programmes.