Information Security Governance Manager
11 days ago
Manchester
Information Security Governance Manager Our client a fast-growing organisation operating in the financial technology space, delivering innovative solutions across mobile payments, e-commerce, and business platforms. They are seeking a highly organised, detail-oriented, and proactive Information Security Governance Manager to lead and manage security assurance and governance programmes across the business. This is a key role responsible for overseeing compliance cycles, coordinating audits, and ensuring robust security controls are maintained and continuously improved in line with regulatory and industry standards. Key Responsibilities Security Governance & Compliance • Manage annual compliance programmes (e.g. PCI DSS v4+, ISO 27001, SWIFT CSCF), • Coordinate control owners across departments, • Maintain risk registers and control frameworks, • Support internal and external audits, • Manage the full policy lifecycle (creation, review, approval, publication) Audit & Assurance, • Act as primary contact for external auditors and assessors, • Prepare audit documentation and evidence packs, • Track and drive remediation activities, • Coordinate gap assessments and readiness reviews, • Provide senior leadership with audit and risk reporting Security Testing & Assurance, • Coordinate penetration testing and vulnerability assessments, • Work with internal teams and third-party providers, • Track remediation of security findings, • Embed testing into change and release processes, • Support supplier security due diligence Policy, Risk & Documentation, • Develop and maintain security policies and standards, • Ensure alignment with regulatory requirements, • Facilitate policy review workshops, • Maintain documentation repositories and version control Process Improvement & Automation, • Identify opportunities to improve governance efficiency, • Leverage automation and AI tools for documentation and tracking, • Enhance reporting dashboards and visibility, • Drive continuous improvement across security programmes Collaboration, • Work closely with Engineering, SRE, Compliance, and Operations teams, • Integrate security governance into product and infrastructure changes, • Support client due diligence and security questionnaires, • Assist commercial teams with security assurance documentation Skills & Experience, • Experience in information security, governance, or compliance, • Strong knowledge of PCI DSS v4+, • Experience with ISO 27001 certification, • Familiarity with SWIFT CSCF (desirable), • Background in fintech or regulated financial services (preferred), • Experience managing audits and working with auditors, • Understanding of risk management frameworks, • Experience with control testing and evidence management, • Knowledge of cloud, infrastructure, and application security concepts, • Experience coordinating penetration testing and vulnerability management, • Strong policy writing and documentation skills, • Experience producing executive-level reporting, • Exposure to automation or AI tools in governance processes Benefits:, • Private health and dental cover for you and your family, • Life assurance, • Generous annual leave plus public holidays, • Support for professional qualifications, • Employee assistance programme Interested? Please Click Apply Now! Information Security Governance Manager