Strategic IT Governance & Compliance Manager

Burberry; Leeds; Hybrid; GBP 60,000 - 75,000; Full time

Job summary

Burberry is seeking a Governance & Compliance Manager to ensure IT governance and compliance processes operate effectively. You will maintain the policy register, coordinate policy reviews, manage compliance reporting and support audit activity to keep governance materials current and audit-ready.

You will collaborate with IT Risk, Cyber Assurance, Security Design, platform teams, domain-aligned teams and third-party partners to ensure policies and compliance obligations are understood and

Qualifications

• Experience in IT governance, compliance, audit support or control management within a technology environment.
• Understanding of compliance frameworks and regulatory requirements such as PCI-DSS, GDPR, ISO 27001, NIST or equivalent.
• Experience maintaining policy registers, governance calendars, evidence repositories and audit documentation.
• Strong organisational skills with the ability to manage multiple reviews, actions, deadlines and stakeholders.
• Effective communicator across technical and non-technical teams to operationalise compliance requirements.

Responsibilities

• Maintain the IT security policy and standards register with owners, review dates, approval status and communication plans.
• Coordinate policy and standards review cycles with accountable owners for updates and approvals.
• Coordinate compliance assessments against internal policies and external requirements (PCI-DSS, GDPR, ISO 27001, NIST).
• Support audit activity by preparing evidence packs, coordinating responses and monitoring remediation actions.
• Manage governance calendar, policy reviews, evidence refresh cycles and reporting cadences.

Skills

IT governance

Regulatory compliance

Audit support

Documentation management

Stakeholder engagement

Job description

Burberry is seeking a Governance & Compliance Manager to ensure IT governance and compliance processes operate effectively. You will maintain the policy register, coordinate policy reviews, manage compliance reporting and support audit activity to keep governance materials current and audit-ready.

You will collaborate with IT Risk, Cyber Assurance, Security Design, platform teams, domain-aligned teams and third-party partners to ensure policies and compliance obligations are understood and