IT Security Governance Lead

Verastar; Sale; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Annual bonus up to 10%

Holiday allowance 25–28 days

Birthday leave

Pension & life cover

Employee discounts

Cycle to work

Wellbeing support

Volunteer time off

On-site gym

Job summary

Clear Business is seeking an IT Security Governance Lead to protect systems and services through robust governance, risk management and compliant practices. You will work with Technology, Legal, Compliance & Risk to maintain the ISMS and ensure controls are effective across the business.

You’ll drive evidence-based audits, supplier assurance and risk reporting, enabling informed decisions and stronger security posture across the organisation.

Qualifications

• Experience in information security governance, risk, compliance, audit or assurance environments.
• Experience supporting security frameworks and certifications such as ISO 27001, Cyber Essentials, PCI DSS, GDPR or other regulated environments.
• Experience coordinating audits, managing evidence, engaging stakeholders and tracking remediation activities.
• Experience conducting security risk assessments and maintaining risk or issue registers, with sound risk-based judgement.
• Strong documentation skills to produce policies, procedures, governance records and audit materials.
• Ability to build effective relationships and communicate security concepts to varied audiences.
• Proactive in prioritising work and improving governance, assurance and control maturity.
• Confident working independently while maintaining governance and audit records with MS 365 proficiency.

Responsibilities

• Develop, maintain and review information security policies, standards, procedures and governance documentation.
• Maintain and improve the ISMS and governance framework aligned to ISO 27001.
• Support security certifications, audits and compliance activities with evidence.
• Identify, assess and report information security risks and coordinate mitigation with stakeholders.
• Coordinate internal and external security audits, manage findings and remediation to completion.
• Conduct supplier security assurance and due diligence throughout the supplier lifecycle.
• Provide governance input into technology changes, projects, vulnerability management and security assessments.
• Produce security reporting, dashboards and governance updates for decision-making.

Skills

InfoSec governance

Risk management

Audit coordination

Policy development

ISO 27001

Cyber Essentials

PCI DSS

GDPR

Stakeholder management

Microsoft 365

Tools

Microsoft 365

Job description

As IT Security Governance Lead, you’ll play a key role in helping to protect business systems and technology services through effective security governance, risk management and compliance activities. Working closely with Technology teams, Legal, Compliance & Risk and wider business stakeholders, you’ll support and continuously improve the Information Security Management System (ISMS) and associated governance frameworks. From supporting audits, certifications and supplier assurance activities to managing security risks and reporting, you’ll help ensure security obligations are met, controls remain effective and stakeholders have the insight they need to make informed decisions.

What We Want You To Do

• Develop, maintain and review information security policies, standards, procedures and governance documentation.
• Maintain and continually improve the Information Security Management System (ISMS) and governance framework aligned to ISO 27001.
• Support security certifications, audits and compliance activities, ensuring evidence is prepared and obligations are effectively managed.
• Identify, assess and report information security risks, maintaining risk registers and coordinating mitigation and treatment activities with stakeholders.
• Coordinate internal and external security audits, managing findings, assurance activities and remediation actions through to completion.
• Conduct supplier security assurance and due diligence activities, supporting security reviews throughout the supplier lifecycle.
• Provide governance, risk and control assurance input into technology changes, projects, vulnerability management and emerging technology assessments.
• Produce security reporting, dashboards and governance updates, supporting informed decision-making across relevant forums and committees.

What Success In The Role Looks Like

• Information security governance documentation is accurate, up to date, approved and consistently embedded across the business.
• Security audits are well coordinated, evidence is complete and findings are effectively managed through to closure.
• Information security risks are identified, assessed, reported and managed in line with agreed governance processes.
• Compliance obligations and certification requirements are supported through clear ownership, robust evidence and effective action tracking.
• Security reporting provides meaningful insight into risk, compliance, vulnerability management and remediation progress, enabling informed decisions and stronger controls.

What You'll Bring To The Role

• Experience working in information security governance, risk, compliance, audit or assurance environments.
• Experience supporting security frameworks, standards and certifications such as ISO 27001, Cyber Essentials, PCI DSS, GDPR or other regulated environments.
• Experience coordinating audits, managing evidence, engaging stakeholders and tracking remediation activities.
• Experience conducting security risk assessments and maintaining risk or issue registers, with the ability to apply sound risk-based judgement.
• Strong documentation skills, with the ability to produce clear and structured policies, procedures, governance records and audit materials.
• Ability to build effective working relationships across technical and non-technical teams and communicate security concepts clearly to different audiences.
• A proactive approach to managing priorities, driving actions to completion and improving governance, assurance and control maturity.
• Confidence working independently while maintaining accurate governance, risk and audit records, supported by strong Microsoft 365 skills.

Why Choose Clear Business

Clear Business was established with the goal of simplifying our customers' lives and making our colleagues' experiences more rewarding. As one of the top providers for small businesses in the UK, we offer a truly distinctive service by providing all essential services in one place: phone, broadband, mobile, water, gas, electricity, payment services, and insurance. We have ambitious growth plans, and we're committed to helping our people grow with us. You'll be given the support, flexibility and opportunities you need to build a successful and rewarding career.

What’s In It For You

• Competitive plus an annual bonus of up to 10%, rewarding your contribution and performance.
• 25 days holiday, increasing to 28 days through length of service.
• Time off to celebrate your birthday every year.
• Buy up to 10 additional holidays and sell up to 5 days annually.
• Pension contributions and life assurance coverage.
• Employee discounts across a wide range of retailers.
• Cycle to work and travel loans for people wanting a greener commute.
• Wellbeing support, including 24-hour GP access, mental health support, fitness programmes, and legal and financial advice.
• Paid time off for volunteering and charity matching for fundraising activities.
• Fantastic on-site amenities including a complimentary gym, free parking and free breakfast.
• Plus, a range of additional benefits and wellbeing initiatives designed to support you both inside and outside of work.

Flexibility & Work-Life Balance

• Full-time, permanent position (37.5 hours per week)
• No weekend working and every bank holiday off, helping you maintain a healthy work-life balance.
• Hybrid working opportunities available following successful completion of your probation period and demonstration of consistent performance.

What Happens Next

If you’re looking for a new challenge with great benefits, then Clear Business is the place for you.

Across Clear Business, we’re passionate about creating an inclusive team and celebrating our diversity. We want talented people with great skills and matching values to join our teams.

All successful candidates will be subject to pre-employment checks.

Please note that this vacancy may close early if we receive enough suitable applications; however, we may retain your application on file for future opportunities.