Cyber Security Compliance Manager

Harvey Nash Group; Manchester; Hybrid; GBP 68,000 - 83,000; Full time

Benefits offered by this job

Hybrid working

Excellent benefits package

Broad remit across supplier assurance,

Cyber security governance influence

Job summary

Harvey Nash Group is seeking a Cyber Security Compliance Manager in Manchester on a hybrid basis. The role focuses on governance, risk and compliance across a complex technology landscape, with a strong emphasis on supplier assurance and third-party risk.

The successful candidate will lead security governance programmes, drive ISO27001 compliance, and collaborate with security operations and IT teams. A senior background in GRC and stakeholder engagement is required.

Qualifications

• Experience in Cyber Security Governance, Risk & Compliance (GRC).
• Strong understanding of ISO27001 and information security management systems.
• Experience managing supplier assurance, vendor assessments or third-party risk.
• Background in risk management, compliance and audit activities.
• Experience reviewing supplier security questionnaires and conducting due diligence.
• Strong stakeholder engagement and communication skills.
• Experience working within regulated environments.

Responsibilities

• Lead cyber security governance, risk and compliance activities.
• Manage supplier assurance and third-party security risk assessments.
• Review vendor security questionnaires and conduct due diligence.
• Maintain and improve ISO27001 compliance.
• Manage cyber risk registers and remediation activities.
• Support internal and external audits.
• Develop and maintain security policies, standards and controls.
• Deliver security awareness initiatives, including phishing simulations.
• Produce governance and compliance reporting for senior stakeholders.
• Collaborate with Security Operations and IT Infrastructure teams.

Skills

GRC experience

ISO27001 knowledge

Supplier assurance

Third-party risk

Security governance

Tools

GRC tools

Job description

Cyber Security Compliance Manager

Manchester (Hybrid)
Up to £75,000
Permanent

We're seeking an experienced Cyber Security Compliance Manager to play a key role in strengthening cyber security governance, compliance and supplier assurance across a complex technology environment.

This is an excellent opportunity for someone with a strong background in Governance, Risk & Compliance (GRC) who enjoys working across cyber security, technology, suppliers and business stakeholders.

The Role

Key responsibilities include:

• Leading cyber security governance, risk and compliance activities.
• Managing supplier assurance and third-party security risk assessments.
• Reviewing vendor security questionnaires and conducting security due diligence.
• Maintaining and improving compliance with frameworks such as ISO27001.
• Managing cyber risk registers and remediation activities.
• Supporting internal and external audits.
• Developing and maintaining security policies, standards and controls.
• Delivering security awareness initiatives, including phishing simulation programmes.
• Producing governance and compliance reporting for senior stakeholders.
• Working closely with Security Operations and IT Infrastructure teams.

About You

We're interested in speaking with candidates who have:

• Experience within Cyber Security Governance, Risk & Compliance (GRC).
• Strong understanding of ISO27001 and information security management systems.
• Experience managing supplier assurance, vendor assessments or third-party risk.
• Background in risk management, compliance and audit activities.
• Experience reviewing supplier security questionnaires and conducting due diligence.
• Strong stakeholder engagement and communication skills.
• Experience working within regulated environments.

Desirable

• ISO27001 Lead Auditor or Lead Implementer certification.
• CISSP, CISM, CRISC or similar security qualifications.
• Knowledge of emerging technology risks, including cloud and AI governance.
• Experience with GRC tools and platforms.

What's on Offer

• Salary up to £75,000
• Hybrid working
• Excellent benefits package
• Broad remit covering supplier assurance, cyber risk and compliance
• Opportunity to influence cyber security governance across a large organisation
• High-profile role working with stakeholders across technology and the wider business

If you're looking for a role combining supplier assurance, third-party risk, ISO27001, governance and cyber compliance, we'd be keen to hear from you.