Security Governance Risk and Assurance Manager

Peregrine; Manchester; On-site; GBP 50,000 - 70,000; Part time

Job summary

A leading energy transformation company is seeking a Security Governance Risk and Assurance Manager in Manchester. The role involves providing comprehensive security assurance for the Licence Renewal programme, reviewing technical designs, and advising on risk mitigation strategies. The ideal candidate will have strong InfoSec experience, knowledge of risk management frameworks, and relevant certifications. You will work within a dynamic team to uphold compliance and security best practices while contributing to Britain's energy future.

Qualifications

• Experience across complex environments (outsourced, telecoms, energy).
• Comfortable in ambiguous, evolving programme contexts.
• Familiarity with public sector programmes and eligible for HMG SC clearance.

Responsibilities

• Provide end-to-end security assurance for the Licence Renewal programme.
• Review technical designs and data flows for security alignment.
• Conduct Information Security and Data Protection Impact Assessments.

Skills

Strong InfoSec experience

Knowledge of risk management methodologies

Experienced in ISO27001

Analytical and detail-oriented

Excellent stakeholder engagement skills

Education

Certifications: CISSP, CISM, CISA, CEH

ISO27001 Lead Auditor/Implementer

Tools

NIST Cybersecurity Framework

PKI

Job description

Security Governance Risk and Assurance Manager

Direct message the job poster from Peregrine

At the Data Communications Company (DCC), we’re transforming Britain’s energy system and helping the country fight climate change. Our secure smart meter network connects millions of homes and businesses, and it’s powered by people like you. If you thrive on making a real impact, taking initiative, and working collaboratively, this is the place for you.

We’re seeking an Information Security Assurance Manager to support our Licence Renewal and DCC1 → DCC2 transition programme. This is a hands-on, multi-disciplinary role where you’ll provide security assurance across projects, systems, and suppliers, ensuring risk management and regulatory compliance are embedded throughout the programme.

What You’ll Do:

• Provide end-to-end security assurance for the Licence Renewal programme.
• Review technical designs, network diagrams, and data flows for security alignment.
• Conduct Information Security and Data Protection Impact Assessments.
• Support system migrations (e.g., EIT) and guide decisions in evolving scenarios.
• Advise stakeholders and suppliers on risk mitigation, compliance, and security best practices.
• Translate technical risks into clear business language for decision-makers.
• Maintain alignment with ISO27001 and other frameworks (e.g., NIST).

Who You Are:

• Strong InfoSec experience across complex environments (outsourced, telecoms, energy).
• Knowledge of risk management methodologies (ISO27005, ISO31000).
• Experienced in ISO27001, security assurance, and audits; penetration testing experience a plus.
• Comfortable working in ambiguous, evolving programme contexts.
• Gravitas to act as an SME and influence decisions while collaborating in a small, specialist team.
• Analytical, detail-oriented, and proactive, with excellent stakeholder engagement skills.
• Certifications: CISSP, CISM, CISA, CEH, ISO27001 Lead Auditor/Implementer.
• Familiarity with NIST Cybersecurity Framework, PKI, or public sector programmes.
• Eligible for HMG SC clearance.

Why DCC?

We value our people and want you to thrive. You’ll have access to a range of benefits to create a personalized plan for your lifestyle, and the chance to grow your career while making a real difference in Britain’s energy future.

Apply Today to be part of our Licence Renewal journey and discover the power of you.

Seniority level

• Mid-Senior level

Employment type

• Temporary

Job function

• Information Technology
• Industries
• Utilities and Telecommunications

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.