Cyber Governance, Risk and Compliance Manager
Core
Establish, maintain, and improve cyber governance, risk management, and compliance capabilities, acting as a bridge between business leadership, technology teams, and regulators to ensure security supports business objectives while protecting information assets.
Role type
Cyber Governance, Risk and Compliance Manager
Builds
Cyber security governance frameworks, policies, standards, procedures, and controls aligned with NIST, FCA/PRA, and ECB expectations.
Domain
Regulated financial services / Cybersecurity
Deliverable
dashboards & analysis
Required skills
Cyber security governance, risk assessment methodologies, regulatory compliance, security frameworks, stakeholder management, reporting, risk identification and assessment, risk remediation planning, horizon scanning, automation of GRC activities.
Preferred skills
GRC platforms implementation, automation and workflow tools, Operational Resilience frameworks.
Technologies
NIST, FCA/PRA, ECB frameworks, RCSA tools, security dashboards, data analytics.
Responsibilities
Own and maintain the Cyber Security Governance Framework; Develop and oversee information security policies, standards, procedures and controls; Provide governance reporting to relevant UK and Corporate Committees; Identify and monitor department Top Risks, Emerging Risks and Issues; Coordinate security reviews, control attestations and policy exception processes; Manage security control testing and assurance programmes; Track risk remediation actions and provide assurance reporting; Facilitate risk identification, assessment, treatment and reporting activities including RCSAs; Maintain the cyber risk register; Define risk appetite metrics and key risk indicators (KRIs); Drive remediation planning and risk reduction activities; Establish and maintain an Emerging Threat Management Programme & oversee Horizon Scanning; Present threat intelligence and strategic risk insights to senior leadership; Identify opportunities to automate governance, compliance and risk management activities; Drive security workflow orchestration and reporting efficiencies; Improve use of security tooling, dashboards and data analytics.
Seniority
Manager, strategic oversight & execution