Hybrid IT Governance & Compliance Leader

Waterstones; Greater London; Híbrido; GBP 70.000 - 110.000; Jornada completa

Descripción de la vacante

Waterstones seeks a senior IT governance and compliance leader to drive control frameworks and audit readiness across the group. You will manage risk, GDPR/data privacy controls, and regulatory alignment while collaborating across IT, Finance, Legal, and Business teams.

The role requires 5+ years in IT audit/governance in regulated environments with strong SOX, ITGC, and ISO27001 knowledge. Hybrid work with UK travel is expected.

Formación

• 5+ years in IT audit, controls, governance or compliance.
• Experience in regulated / FTSE or enterprise environments.
• Strong knowledge of SOX, ITGCs, ISO27001, COBIT, ITIL, NIST.

Responsabilidades

• Lead IT control frameworks (SOX, ITGC, ISO27001, COBIT, ITIL, NIST).
• Run internal/external IT audits end-to-end with readiness, execution, remediation.
• Maintain SOX narratives, RACMs, and control docs.
• Manage IT risk register and perform risk assessments.
• Embed controls across change, access, incident, and operations.
• Lead user access reviews and enforce segregation of duties.
• Oversee GDPR-aligned data privacy controls and DPIAs.
• Maintain and test Incident Response Plan including tabletop exercises.
• Deliver executive reporting on risks, audits, and compliance posture.
• Monitor regulatory changes and update controls accordingly.
• Drive control automation and continuous improvement.
• Deliver security and compliance awareness activities.
• Partner with IT, InfoSec, Finance, Audit, Legal, and business stakeholders.
• Support NIS2 and UK/EU regulatory alignment where applicable.
• Implement and optimize GRC / control automation tooling.
• Own third-party / supplier assurance for technology risk.
• Define and report KPIs (audit findings, remediation SLAs, control effectiveness).
• Provide oversight on emerging risks including AI governance and new technologies.

Conocimientos

IT governance

IT audit

Regulatory compliance

SOX

ISO27001

COBIT

ITIL

NIST

Educación

Degree in IT or related field

Herramientas

GRC tooling

Descripción del empleo

Waterstones seeks a senior IT governance and compliance leader to drive control frameworks and audit readiness across the group. You will manage risk, GDPR/data privacy controls, and regulatory alignment while collaborating across IT, Finance, Legal, and Business teams.

The role requires 5+ years in IT audit/governance in regulated environments with strong SOX, ITGC, and ISO27001 knowledge. Hybrid work with UK travel is expected.