Cyber Security Compliance Manager

Manchester (Hybrid)
Permanent
Salary: Up to £75,000

We're seeking an experienced Cyber Security Compliance Manager to play a key role in strengthening cyber security governance, supplier assurance and risk management across a complex and highly regulated environment.

This is a broad Governance, Risk & Compliance (GRC) role with a strong emphasis on supplier assurance, third-party risk management and cyber compliance, working closely with Security Operations, Infrastructure and wider business stakeholders.

The Role

As Cyber Security Compliance Manager, you will be responsible for ensuring effective governance, compliance and risk management practices are embedded across the organisation.

Key responsibilities include:

  • Leading Cyber Security Governance, Risk & Compliance (GRC) activities.
  • Managing supplier assurance and third-party security risk assessments.
  • Reviewing vendor security questionnaires and conducting security due diligence.
  • Managing supplier onboarding security reviews and ongoing assurance activities.
  • Maintaining and improving compliance with recognised security frameworks, including ISO27001.
  • Managing cyber risk registers, treatment plans and remediation activities.
  • Supporting internal and external audits.
  • Developing and maintaining security policies, standards and procedures.
  • Delivering security awareness initiatives, including phishing simulation programmes.
  • Producing governance, compliance and risk reporting for senior stakeholders.
  • Working closely with Security Operations and IT Infrastructure teams to ensure security controls remain effective.
  • Supporting the continuous improvement of the organisation's cyber security maturity.

About You

We're interested in speaking with candidates who can demonstrate experience in:

  • Cyber Security Governance, Risk & Compliance (GRC).
  • Supplier assurance, third-party risk management or vendor security assessments.
  • Reviewing supplier security questionnaires and security due diligence documentation.
  • ISO27001 and Information Security Management Systems (ISMS).
  • Cyber risk management, risk registers and remediation planning.
  • Internal and external audit support.
  • Security awareness and phishing simulation campaigns.
  • Security policies, standards and controls.
  • Working within regulated environments.
  • Engaging with technical and non-technical stakeholders.

Desirable Experience

  • ISO27001 Lead Auditor or Lead Implementer certification.
  • CISSP, CISM, CRISC or equivalent qualifications.
  • Experience using GRC platforms such as OneTrust, Archer, ServiceNow GRC, ProcessUnity or similar.
  • Experience assessing supplier controls and reviewing evidence such as:
    • SOC reports
    • ISO certifications
    • Penetration test reports
    • Security policies and procedures
  • Knowledge of emerging technology risks including cloud, SaaS and AI governance.

What's On Offer

  • Salary up to £75,000
  • Hybrid working arrangement
  • Excellent benefits package
  • High-profile role with broad organisational exposure
  • Opportunity to influence cyber security governance and compliance strategy
  • Collaborative environment working across Cyber Security, Infrastructure and wider business functions

Ideal Backgrounds

This role is likely to suit professionals currently working as:

  • Cyber Security Compliance Manager
  • Information Security Compliance Manager
  • Information Security Assurance Manager
  • Security GRC Manager
  • Cyber Risk Manager
  • Third Party Risk Manager
  • Supplier Assurance Manager
  • Supplier Security Manager
  • Information Security Manager (with strong GRC and supplier assurance experience)

This is an excellent opportunity for someone looking to combine supplier assurance, cyber compliance, risk management and stakeholder engagement in a role with significant visibility and influence across the organisation.

Apply