Cyber Compliance Manager

Cyber Security Compliance Manager / Permanent / Manchester (Onsite Twice Per Month) We’re supporting an organisation looking for a Cyber Security Compliance Manager to help strengthen security governance, risk management, supplier assurance and regulatory compliance across a complex IT environment.

The Role

You’ll work across Information Security and IT teams to ensure robust security controls, compliance processes and risk management practices are embedded throughout the organisation.

Key responsibilities include

• Leading cyber security governance, risk and compliance (GRC) activities.
• Managing supplier assurance processes, including onboarding new vendors and conducting security due diligence.
• Reviewing supplier security questionnaires and building strong relationships with third-party providers.
• Maintaining and developing controls aligned to ISO 27001 and broader security standards.
• Managing cyber risk registers, assessments and remediation activities.
• Coordinating internal and external audits and compliance reviews.
• Working closely with Security Operations and IT Infrastructure teams to ensure controls are effective.
• Running security awareness initiatives, including phishing simulation exercises.
• Collaborating with colleagues across Information Security and wider business functions to drive continual improvement.

About You

• Strong background in Cyber Security Governance, Risk & Compliance (GRC).
• Experience with supplier assurance, third-party risk management or vendor security assessments.
• Good knowledge of ISO 27001 and security control frameworks.
• Experience using GRC tooling to manage risk, controls and compliance activities.
• Understanding of cyber risk management and audit processes.
• Ability to engage with both technical and non-technical stakeholders.
• Previous IT Infrastructure experience would be highly advantageous.

If you’re an experienced Cyber Security GRC professional looking for a role with a broad remit covering compliance, supplier assurance and risk management, we’d love to hear from you.