provides operational excellence whilst identifying new areas of growth as part of our day to day objectives. Job Description for IT & Cyber Policy andGovernance Lead Business Area: Information Security Job Title: IT & Cyber Governanceand Policy Lead Scope and Coverage: Global Outline Purpose of Role This role will: Implement … and develop and own IT and cyber governance processes and forums in alignment with the IT and Information security operations andrisk framework. Maintain and improve the IT and information security policy framework including the suite of policies and standards and associated processes. Help drive a robust security posture for … a large, complex organisation, trading globally within a constantly evolving IT and information security threat environment. Impact of Role Implement governance framework to enable enforcement andmanagement of IT and cyber policies across all JD entities. Help drive good security hygiene and the use of appropriate controls into the business More ❯
as ISO 27001 (Implementation, Compliance, Certification, and audit reviews), NIST CSF, and Cyber Essentials. Experience working in an Information Security role dealing specifically with governance, riskandcompliance areas. Prior experience writing Information Security related Policies, Processes and Procedures. Experience managing internal and third-party vendor risk assessments and writing More ❯
processes. Produce high-quality documentation including business cases, process maps, and regulatory impact assessments. Key Skills & Competencies Strong knowledge of ServiceNow platform (ITSM, ITOM, GRC, or HRSD modules) Strategic Thinking & Business Acumen in Financial Services Business Analysis & Functional Design Change Management & Transformation RiskManagement & Controls in Regulated Environments Process Improvement More ❯
security teams at SA Power Networks. You'll contribute to a wide range of activities in the cyber security field, including: Cyber security advisory (Governance, Risk, andCompliance) SECOPS (Security Operations) Digital Identity You'll gain experience with industry-leading security technologies and practices, including firewalls, SIEM tools, vulnerability assessment More ❯
Drive M&A activity, including due diligence, integration, and financial modelling. Provide strategic financial insights to guide decision-making at Board level. Strengthen financial governance, riskmanagement, and regulatory compliance. Oversee financial planning, forecasting, and cash flow management to support scalability. Build and develop a high-performing finance team, embedding More ❯
Job Title: GRC Lead Location: Manchester (3 days per week onsite) Salary: Up to £95,000 + discretionary bonus & excellent benefits Employment Type: Full-time, Permanent (applicants must be UK based and NOT require sponsorship) About the Role: A leading organisation is seeking a highly experienced and strategic Security Culture … and Awareness Manager to join its cyber security team. This is a fantastic opportunity to shape and lead the development, governance, and awareness of IT and cyber security policies across a large and complex organisation. As the Global Cyber Policy andGovernance Lead, you will be responsible for aligning cyber … enhancing policy frameworks, ensuring compliance with international standards and regulations, and providing leadership-level reporting and insight. Key Responsibilities: Lead the design, implementation, andgovernance of IT and cyber security policy frameworks. Develop and manage a global policy governance structure that aligns with industry best practices and internal strategy. Ensure More ❯
Warwick, north west england, United Kingdom Hybrid / WFH Options
Pontoon Solutions
external market factors Develop both expertise and corporate intelligence and intellectual property on the assigned (sub)categories, as relevant Support organisation-wide procedures for governance, riskandcompliancemanagement that manage, mitigate and minimise risks to ensure that work carried out within the Sourcing & Contract Management Hub is aligned to More ❯
Work collaboratively with business owners within the various business entities to correctly identify strengths, weaknesses, vulnerabilities, and opportunities for improvement. Formulate clear recommendations, drive governance strategies, and influence business stakeholders and technology stakeholders at all levels. Drive continuous improvement in the adoption and exploitation of good information security practice across … the business. Drive security innovation that enables new retail capabilities while working with IT GRC for maintaining appropriate risk controls. Facilitate communication between enterprise security teams and retail business units. Delivery of security services Triage, review and manage new project and security requests to provide a quality, repeatable security assessment. More ❯
Manchester, Lancashire, United Kingdom Hybrid / WFH Options
Oliver James Associates Ltd
global frameworks. Act as a trusted advisor for IT & Ops stakeholders-identifying risks and building mitigation plans. Contribute to risk education, awareness campaigns, andgovernance training. Support leadership with impactful insights and data-driven reporting. Key Skills Needed Strong experience in IT & Operations Governance, Risk or Compliance. Substantial knowledge of More ❯
risk professional with expertise in security complianceand assurance, ISO 27001 implementation, PMO (project management office), risk assessments, supply chain, and working on other governance, riskandcompliance projects within a team. T The Risk Manager will verify that third parties meet the minimum-security requirements to protect our organisation … relevant risk mitigations, deal with multiple stakeholders to ensure end to end treatment is applied. They will also be part of our PMO, andgovernanceandcompliance processes through the business and frequently deliver updates to senior management in meetings and information security forums. They will work towards ensuring the … communicated to stakeholders and appropriately documented. Key Accountabilities, Skills & Experience Proven experience in Information Security , specifically in third-party risk , supply chain assurance , andgovernance, risk, andcompliance . Strong understanding of ISO 27001 (implementation, audit, and continuous improvement), Cyber Essentials, and NIST CSF. Familiarity with reviewing SOC 2 Type More ❯
City, Manchester, United Kingdom Hybrid / WFH Options
Medlock Partners Ltd
Talent Acquisition Partner: Partner with hiring managers to understand their recruitment needs and run targeted direct sourcing campaigns for permanent roles in IT, Finance, Governance, Risk & Legal, IT & PMO. Manage the full recruitment process, from sourcing and screening to coordinating interviews and guiding candidates through to offer stage. Ensure a … Extensive recruitment experience in an in-house, internal, or RPO role, with a strong track record of hiring top talent across financial services, including Governance, Risk & Compliance, Legal, IT & PMO, Finance & Accounting, and Technology, and Investment. Strong direct recruiting capability with the ability to use sound judgment of when to More ❯
Job Description Job Title: GRC Lead Location: Manchester (3 days per week onsite) Salary: Up to £95,000 + discretionary bonus & excellent benefits Employment Type: Full-time, Permanent (applicants must be UK based and NOT require sponsorship) About the Role: A leading organisation is seeking a highly experienced and strategic … Security Culture and Awareness Manager to join its cyber security team. This is a fantastic opportunity to shape and lead the development, governance, and awareness of IT and cyber security policies across a large and complex organisation. As the Global Cyber Policy andGovernance Lead, you will be responsible for … enhancing policy frameworks, ensuring compliance with international standards and regulations, and providing leadership-level reporting and insight. Key Responsibilities: Lead the design, implementation, andgovernance of IT and cyber security policy frameworks. Develop and manage a global policy governance structure that aligns with industry best practices and internal strategy. Ensure More ❯