Cyber Security Compliance Manager

Harvey Nash; Manchester; Vor Ort; GBP 70.000 - 100.000; Vollzeit

Zusammenfassung

Harvey Nash is seeking a Cyber Security Compliance Manager (GRC & Supplier Assurance) in Manchester to strengthen governance, supplier assurance and security compliance across a large organisation.

You will assess supplier security controls, manage risk, and ensure compliance with ISO 27001, NIST and PCI DSS while guiding AI governance considerations and risk remediation initiatives.

Qualifikationen

• Strong experience in Cyber Security Governance, Risk & Compliance (GRC).
• Proven experience conducting supplier assurance reviews and assessing third-party security controls.
• Experience reviewing security questionnaires, risk assessments and supplier submissions.
• Good understanding of ISO 27001, NIST, PCI DSS and broader security frameworks.
• Knowledge of emerging technology risks including AI governance.

Aufgaben

• Lead cyber security compliance and assurance activities.
• Review supplier security questionnaires and third-party controls.
• Conduct supplier assurance reviews and challenge responses.
• Manage compliance against ISO 27001, NIST, PCI DSS and related standards.
• Support governance of emerging technologies including AI.
• Maintain risk registers and drive remediation activities.
• Produce reports and recommendations for stakeholders.
• Deliver security awareness initiatives and strengthen security culture.
• Collaborate with procurement, technology and business teams to minimise risk.

Kenntnisse

GRC

Supplier assurance

Third-party security

Security questionnaires

Risk assessments

Stakeholder communication

GRC platforms

Tools

GRC platforms

Jobbeschreibung

Cyber Security Compliance Manager (GRC & Supplier Assurance)

We're looking for a Cyber Security Compliance Manager to play a key role in strengthening cyber governance, supplier assurance and security compliance across a large, complex organisation.

This is an excellent opportunity for a hands-on cyber assurance professional who enjoys working closely with suppliers, assessing security controls, managing risk, and ensuring compliance with recognised frameworks and standards.

What you’ll be doing

• Leading cyber security compliance and assurance activities.


• Reviewing and assessing supplier security questionnaires and third-party security controls.


• Conducting supplier assurance reviews and challenging responses where required.


• Managing compliance against frameworks including ISO 27001, NIST, PCI DSS and related standards.


• Supporting the assessment and governance of emerging technologies, including AI and Generative AI solutions.


• Maintaining risk registers and driving remediation activities.


• Producing reports and recommendations for key stakeholders.


• Delivering security awareness initiatives and helping strengthen security culture across the organisation.


• Working closely with procurement, technology and business teams to minimise cyber risk.

What we’re looking for

• Strong experience in Cyber Security Governance, Risk & Compliance (GRC).


• Proven experience conducting supplier assurance reviews and assessing third-party security controls.


• Experience reviewing security questionnaires, risk assessments and supplier submissions.


• Good understanding of ISO 27001, NIST, PCI DSS and broader security frameworks.


• Knowledge of emerging technology risks, including AI, Microsoft Copilot and Generative AI.


• Ability to challenge technical controls and communicate risk effectively to both technical and non-technical stakeholders.


• Experience using GRC platforms and compliance tooling.


• Strong stakeholder management and communication skills.


• CISM, CISSP, CRISC or similar qualifications.


• Experience within highly regulated environments such as healthcare, financial services, government or critical national infrastructure.


• Exposure to ISO 42001 or AI governance frameworks.

Why apply?

This role offers the opportunity to take ownership of cyber compliance and supplier assurance activities while influencing how emerging technologies are adopted securely within a highly regulated environment.

If you're currently working as a Cyber Security Compliance Manager, Security Assurance Manager, Third-Party Risk Manager, Supplier Assurance Manager or Cyber GRC Manager, we'd love to hear from you.