IT Security Governance Lead

Clear Business group

Sale

Hybrid

GBP 85,000 - 110,000

Full time

8 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Annual bonus

Hybrid working

25 days holiday

Pension contributions

Wellbeing support

Employee discounts

Job summary

Clear Business is seeking an IT Security Governance Lead to shape and run governance, risk, and compliance across technology services. You will maintain ISMS alignment with ISO 27001, coordinate audits, manage risk registers and reporting, and partner with Legal, Compliance and Risk stakeholders to drive robust controls.

The role emphasizes evidence-based assurance, supplier security reviews, and ongoing governance improvements, with hybrid working and a competitive benefits package.

Qualifications

Experience in information security governance, risk, compliance, audit or assurance environments.
Experience supporting security frameworks and certifications such as ISO 27001, Cyber Essentials, PCI DSS, GDPR.
Experience coordinating audits, managing evidence, engaging stakeholders and tracking remediation activities.
Experience conducting security risk assessments and maintaining risk or issue registers.
Strong documentation skills and ability to produce clear governance records and audit materials.

Responsibilities

Develop, maintain and review information security policies, standards, procedures and governance documentation.
Maintain and improve the ISMS and governance framework aligned to ISO 27001.
Support security certifications, audits and compliance activities with evidence prepared.
Identify, assess and report information security risks, maintaining risk registers and coordinating mitigations.
Coordinate internal and external security audits, managing findings and remediation actions through to completion.
Conduct supplier security assurance and due diligence activities across the supplier lifecycle.
Provide input into technology changes, projects, vulnerability management and security assessments.
Produce security reporting, dashboards and governance updates for informed decision-making.

Skills

Information security governance

Risk management

Audit & assurance

Stakeholder engagement

Policy development

Documentation

Tools

Microsoft 365

Job description

Our Role

As IT Security Governance Lead, you'll play a key role in helping to protect business systems and technology services through effective security governance, risk management and compliance activities. Working closely with Technology teams, Legal, Compliance & Risk and wider business stakeholders, you'll support and continuously improve the Information Security Management System (ISMS) and associated governance frameworks. From supporting audits, certifications and supplier assurance activities to managing security risks and reporting, you'll help ensure security obligations are met, controls remain effective and stakeholders have the insight they need to make informed decisions.

What we want you to do

Develop, maintain and review information security policies, standards, procedures and governance documentation.
Maintain and continually improve the Information Security Management System (ISMS) and governance framework aligned to ISO 27001.
Support security certifications, audits and compliance activities, ensuring evidence is prepared and obligations are effectively managed.
Identify, assess and report information security risks, maintaining risk registers and coordinating mitigation and treatment activities with stakeholders.
Coordinate internal and external security audits, managing findings, assurance activities and remediation actions through to completion.
Conduct supplier security assurance and due diligence activities, supporting security reviews throughout the supplier lifecycle.
Provide governance, risk and control assurance input into technology changes, projects, vulnerability management and emerging technology assessments.
Produce security reporting, dashboards and governance updates, supporting informed decision-making across relevant forums and committees.

What success in the role looks like

Information security governance documentation is accurate, up to date, approved and consistently embedded across the business.
Security audits are well coordinated, evidence is complete and findings are effectively managed through to closure.
Information security risks are identified, assessed, reported and managed in line with agreed governance processes.
Compliance obligations and certification requirements are supported through clear ownership, robust evidence and effective action tracking.
Security reporting provides meaningful insight into risk, compliance, vulnerability management and remediation progress, enabling informed decisions and stronger controls.

What you'll bring to the role

Experience working in information security governance, risk, compliance, audit or assurance environments.
Experience supporting security frameworks, standards and certifications such as ISO 27001, Cyber Essentials, PCI DSS, GDPR or other regulated environments.
Experience coordinating audits, managing evidence, engaging stakeholders and tracking remediation activities.
Experience conducting security risk assessments and maintaining risk or issue registers, with the ability to apply sound risk-based judgement.
Strong documentation skills, with the ability to produce clear and structured policies, procedures, governance records and audit materials.
Ability to build effective working relationships across technical and non-technical teams and communicate security concepts clearly to different audiences.
A proactive approach to managing priorities, driving actions to completion and improving governance, assurance and control maturity.
Confidence working independently while maintaining accurate governance, risk and audit records, supported by strong Microsoft 365 skills.

Why Choose Clear Business

Clear Business was established with the goal of simplifying our customers' lives and making our colleagues' experiences more rewarding.

As one of the top providers for small businesses in the UK, we offer a truly distinctive service by providing all essential services in one place: phone, broadband, mobile, water, gas, electricity, payment services, and insurance.

We have ambitious growth plans, and we're committed to helping our people grow with us. You'll be given the support, flexibility and opportunities you need to build a successful and rewarding career.

What's in it for you

Competitive plus an annual bonus of up to 10%, rewarding your contribution and performance.
25 days holiday, increasing to 28 days through length of service.
Time off to celebrate your birthday every year.
Buy up to 10 additional holidays and sell up to 5 days annually.
Pension contributions and life assurance coverage.
Employee discounts across a wide range of retailers.
Cycle to work and travel loans for people wanting a greener commute.
Wellbeing support, including 24-hour GP access, mental health support, fitness programmes, and legal and financial advice.
Paid time off for volunteering and charity matching for fundraising activities.
Fantastic on-site amenities including a complimentary gym, free parking and free breakfast.
Plus, a range of additional benefits and wellbeing initiatives designed to support you both inside and outside of work.

Flexibility & Work-Life Balance

Full-time, permanent position (37.5 hours per week)
No weekend working and every bank holiday off, helping you maintain a healthy work-life balance.
Hybrid working opportunities available following successful completion of your probation period and demonstration of consistent performance.

What happens next

If you're looking for a new challenge with great benefits, then Clear Business is the place for you.

Across Clear Business, we're passionate about creating an inclusive team and celebrating our diversity. We want talented people with great skills and matching values to join our teams.

All successful candidates will be subject to pre-employment checks.

Please note that this vacancy may close early if we receive enough suitable applications; however, we may retain your application on file for future opportunities.

Our Story

We are one of the UK's leading providers of essential services to small businesses. We supply a wide range of essential services - Fixed Lines, Broadband, Mobile, Water, Gas, Green Electricity and Insurance through our sister company The Insurance Octopus. Our goal is to simplify essential services for our customers by offering the widest range of products on the market. Not only have we experienced continued growth and strong financial performance as a result, we have been recognised by the following awards: