Senior Cyber Risk & IT Compliance Lead

Manchester United FC; Carrington; On-site; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Annual incentive scheme

25 days annual leave

Electric vehicle scheme

Health cash plan

Wellness support

Exclusive discounts

Gym facilities

Enhanced family leave benefits

Career development

Job summary

Manchester United is seeking a Senior Technology Risk and Compliance Analyst to administer IT risk and compliance programmes, coordinate IT SOX, PCI DSS and UK GDPR, and manage third-party assurance. The role focuses on ITGCs, supplier cyber risk and broader cyber risk activities.

You will collaborate with control owners, review evidence, identify gaps, and drive remediation, ensuring accountability remains with the business. The role blends risk assessment, testing and governance reporting.

Qualifications

• Experience in IT controls, IT audit and cyber risk management.
• Knowledge of ITGCs, access/change management and incident controls.
• Familiarity with SOX-like controls and audit support.

Responsibilities

• Maintain IT risk and compliance framework, risk registers and governance reporting.
• Coordinate ITSOX, PCI DSS, UK GDPR requirements and third-party assurance.
• Lead due diligence for suppliers and security assessments.

Skills

IT controls

IT auditing

technology risk

cyber GRC

information security

IT general controls

risk assessments

supplier risk

analytical skills

written communication

independent work

Education

CISA

CRISC

CISM

ISO 27001

Tools

Microsoft 365

Azure

GRC tooling

Job description

Manchester United is seeking a Senior Technology Risk and Compliance Analyst to administer IT risk and compliance programmes, coordinate IT SOX, PCI DSS and UK GDPR, and manage third-party assurance. The role focuses on ITGCs, supplier cyber risk and broader cyber risk activities.

You will collaborate with control owners, review evidence, identify gaps, and drive remediation, ensuring accountability remains with the business. The role blends risk assessment, testing and governance reporting.