Governance & Compliance Manager

Burberry; Leeds; On-site; GBP 60,000 - 90,000; Full time

Job summary

Burberry is seeking a Governance & Compliance Manager to oversee IT governance, compliance processes and policy documentation. You will coordinate reviews, manage evidence for audits and ensure obligations are understood across IT and third parties.

The role interfaces with IT Risk, Cyber Assurance, platform teams and domain-aligned groups to embed compliant practices, track gaps and report progress. Strong collaboration and detail orientation are essential.

Qualifications

• Experience in IT governance, compliance, audit support or control management within a technology environment.
• Understanding of compliance frameworks and regulatory requirements such as PCI-DSS, GDPR, ISO 27001, NIST or equivalent.
• Experience maintaining policy registers, governance calendars, evidence repositories and audit documentation.

Responsibilities

• Maintain the IT security policy and standards register, ensuring documents have clear owners, review dates, approval status and communication plans.
• Coordinate policy and standards review cycles, working with accountable owners to ensure updates are completed, approved and communicated on schedule.
• Coordinate compliance assessments against internal policies, security standards and external requirements such as PCI-DSS, GDPR, ISO 27001 or equivalent frameworks.
• Support internal and external audit activity by preparing evidence packs, coordinating responses, tracking findings and monitoring remediation actions.
• Manage the governance calendar, including policy reviews, compliance assessments, audit milestones, evidence refresh cycles and reporting cadences.
• Maintain governance documentation and evidence repositories, ensuring materials are structured, current, traceable and audit ready.
• Track compliance status, exceptions, control gaps and remediation progress, escalating overdue or material issues through the appropriate governance route.
• Work with domain-aligned, platform and enabling teams to ensure compliance requirements are understood, embedded into ways of working and evidenced consistently.
• Align with the IT Risk Manager to ensure compliance gaps and policy exceptions are reflected in risk reporting where appropriate.
• Align with Cyber Assurance to ensure evidence requirements, assurance findings and compliance reporting are connected and not duplicated.
• Support regulatory and contractual compliance activity where it intersects with IT and cyber governance.
• Prepare compliance reports, dashboards and governance materials for the Senior Manager, Governance, Risk & Compliance and relevant Cyber & Risk forums.

Skills

IT governance

Compliance

Audit support

Policy management

Stakeholder comms

Risk awareness

Job description

INTRODUCTION

At Burberry, we believe creativity opens spaces. Our purpose is to unlock the power of imagination to push boundaries and open new possibilities for our people, our customers and our communities. This is the core belief that has guided Burberry since it was founded in 1856 and is central to how we operate as a company today. We aim to provide an environment for creative minds from different backgrounds to thrive, bringing a wide range of skills and experiences to everything we do. As a purposeful, values-driven brand, we are committed to being a force for good in the world as well, creating the next generation of sustainable luxury for customers, driving industry change and championing our communities.

JOB PURPOSE

The Governance & Compliance Manager ensures Burberry’s IT governance and compliance processes operate consistently and are evidenced effectively. The role maintains the policy register, coordinates policy review cycles, manages compliance reporting, supports audit activity, and ensures governance documentation remains current and audit-ready. The role works closely with IT Risk, Cyber Assurance, Security Design, platform teams, domain-aligned teams and third-party partners to ensure policies and compliance obligations are understood and operationalised across IT. This is a governance and compliance management role, not a technical control delivery or independent assurance testing role. The role does not own remediation delivery or risk acceptance decisions, but ensures compliance requirements are clear, evidence is available, and exceptions or gaps are tracked through the appropriate governance route.

RESPONSIBILITIES

• Maintain the IT security policy and standards register, ensuring documents have clear owners, review dates, approval status and communication plans.
• Coordinate policy and standards review cycles, working with accountable owners to ensure updates are completed, approved and communicated on schedule.
• Coordinate compliance assessments against internal policies, security standards and external requirements such as PCI-DSS, GDPR, ISO 27001 or equivalent frameworks.
• Support internal and external audit activity by preparing evidence packs, coordinating responses, tracking findings and monitoring remediation actions.
• Manage the governance calendar, including policy reviews, compliance assessments, audit milestones, evidence refresh cycles and reporting cadences.
• Maintain governance documentation and evidence repositories, ensuring materials are structured, current, traceable and audit ready.
• Track compliance status, exceptions, control gaps and remediation progress, escalating overdue or material issues through the appropriate governance route.
• Work with domain-aligned, platform and enabling teams to ensure compliance requirements are understood, embedded into ways of working and evidenced consistently.
• Align with the IT Risk Manager to ensure compliance gaps and policy exceptions are reflected in risk reporting where appropriate.
• Align with Cyber Assurance to ensure evidence requirements, assurance findings and compliance reporting are connected and not duplicated.
• Support regulatory and contractual compliance activity where it intersects with IT and cyber governance.
• Prepare compliance reports, dashboards and governance materials for the Senior Manager, Governance, Risk & Compliance and relevant Cyber & Risk forums.

PERSONAL PROFILE

• Experience in IT governance, compliance, audit support or control management within a technology environment.
• Understanding of compliance frameworks and regulatory requirements such as PCI-DSS, GDPR, ISO 27001, NIST or equivalent.
• Experience maintaining policy registers, governance calendars, evidence repositories and audit documentation.
• Strong organisational skills, with attention to detail and the ability to manage multiple reviews, actions, deadlines and stakeholders.
• Effective communicator, able to work across technical and non-technical teams to operationalise compliance requirements.
• Experience supporting internal or external audits, compliance assessments and remediation tracking.
• Understanding of IT risk, cyber controls, supplier obligations and security governance processes is beneficial.

Burberry is an Equal Opportunities Employer and as such, treats all applications equally and recruits purely on the basis of skills and experience.