Cyber Governance Risk and Compliance Administrator

Cyber Governance Risk and Compliance Administrator focuses on maintaining the isms on a day-to-day basis, including policy and procedure document control, version management.

What the role involves

• Maintaining the ISMS on a day-to-day basis, including policy and procedure document control, version management.
• Schedule, and conduct internal audits against ISO 27001 and other applicable frameworks.
• Document findings and track corrective actions to closure.
• Maintaining the risk register, supporting risk owners with assessments, treatment plans, and periodic reviews.
• Maintain evidence to support certification audits, customer assurance requests, and regulatory obligations.
• Prepare reports and metrics, and minute outcomes.

Skills and requirements

• Minimum 1–2 years' experience in a cyber security, GRC, IT audit, or information assurance role.
• Practical exposure to at least one recognised security or compliance framework (ISO 27001, PCI DSS, NIST CSF, Cyber Essentials, or similar).
• Comfortable working with Microsoft 365 (Word, Excel, SharePoint) and GRC or ticketing tools.
• A foundational cyber security qualification (e.g. CompTIA Security+, ISO 27001 Foundation, ISC2 CC) or demonstrable equivalent knowledge.

Candidate fit

• organisation, accuracy, communication, and careful task follow-through