IT Governance & Compliance Lead

Burberry; Ledston; On-site; GBP 65,000 - 85,000; Full time

Job summary

Burberry is seeking a Governance & Compliance Manager to ensure IT governance and compliance processes operate consistently, with an emphasis on policy registers, review cycles and evidence readiness. You will work across IT risk, cyber assurance and platform teams to translate obligations into operational practices.

The role focuses on governance and compliance management rather than technical delivery, ensuring gaps are tracked, and governance routes are followed for remediation and audit

Qualifications

• Experience in IT governance, compliance, audit support or control management within a technology environment.
• Understanding of compliance frameworks and regulatory requirements such as PCI-DSS, GDPR, ISO 27001, NIST or equivalent.
• Experience maintaining policy registers, governance calendars, evidence repositories and audit documentation.
• Strong organisational skills, with attention to detail and the ability to manage multiple reviews, actions, deadlines and stakeholders.
• Effective communicator, able to work across technical and non-technical teams to operationalise compliance requirements.
• Experience supporting internal or external audits, compliance assessments and remediation tracking.
• Understanding of IT risk, cyber controls, supplier obligations and security governance processes is beneficial.

Responsibilities

• Maintain the IT security policy and standards register, ensuring documents have clear owners, review dates, approval status and communication plans.
• Coordinate policy and standards review cycles, working with accountable owners to ensure updates are completed, approved and communicated on schedule.
• Coordinate compliance assessments against internal policies, security standards and external requirements such as PCI-DSS, GDPR, ISO 27001 or equivalent frameworks.
• Support internal and external audit activity by preparing evidence packs, coordinating responses, tracking findings and monitoring remediation actions.
• Manage the governance calendar, including policy reviews, compliance assessments, audit milestones, evidence refresh cycles and reporting cadences.
• Maintain governance documentation and evidence repositories, ensuring materials are structured, current, traceable and audit ready.
• Track compliance status, exceptions, control gaps and remediation progress, escalating overdue or material issues through the appropriate governance route.
• Work with domain-aligned, platform and enabling teams to ensure compliance requirements are understood, embedded into ways of working and evidenced consistently.
• Align with the IT Risk Manager to ensure compliance gaps and policy exceptions are reflected in risk reporting where appropriate.
• Align with Cyber Assurance to ensure evidence requirements, assurance findings and compliance reporting are connected and not duplicated.
• Support regulatory and contractual compliance activity where it intersects with IT and cyber governance.
• Prepare compliance reports, dashboards and governance materials for the Senior Manager, Governance, Risk & Compliance and relevant Cyber & Risk forums.

Skills

IT governance

Compliance management

Audit support

Policy management

Stakeholder management

Job description

Burberry is seeking a Governance & Compliance Manager to ensure IT governance and compliance processes operate consistently, with an emphasis on policy registers, review cycles and evidence readiness. You will work across IT risk, cyber assurance and platform teams to translate obligations into operational practices.

The role focuses on governance and compliance management rather than technical delivery, ensuring gaps are tracked, and governance routes are followed for remediation and audit