Security & GRC Lead - Hybrid UK

Vix Technology; Manchester; Hybrid; GBP 55,000 - 75,000; Full time

Job summary

Vix Technology seeks an Information Security & Governance, Risk & Compliance Specialist to join the Manchester team. You’ll own the ISMS and drive continual improvement across security and compliance measures.

You’ll coordinate audits, manage evidence, and work with Security, Engineering, Technology and business teams to remediate findings. A background in ISO 27001 and PCI DSS is valued, with certifications welcomed but not essential.

Qualifications

• Experience with ISO 27001 ISMS, audit prep, evidence management and remediation.
• Understanding information security governance, risk and compliance with technical and non-technical teams.
• Ability to translate security requirements into practical actions and drive fixes.

Responsibilities

• Own day-to-day coordination and continual improvement of the ISMS.
• Support ISO 27001 certification, surveillance and internal audits.
• Coordinate audit evidence and work with stakeholders to close findings.
• Maintain security policies, procedures, controls and compliance docs.
• Support PCI DSS and wider security compliance and assurance activities.
• Track and report on compliance status, risks, audits and actions.
• Help develop our approach across ISO 27017, ISO 27018 and ISO 22301.

Skills

Information security knowledge

GRC management

Audit preparation

Stakeholder communication

Education

ISO 27001 Lead Implementer/Auditor

CISA/CRISC/CISSP (bonus)

Job description

Vix Technology seeks an Information Security & Governance, Risk & Compliance Specialist to join the Manchester team. You’ll own the ISMS and drive continual improvement across security and compliance measures.

You’ll coordinate audits, manage evidence, and work with Security, Engineering, Technology and business teams to remediate findings. A background in ISO 27001 and PCI DSS is valued, with certifications welcomed but not essential.