Information Technology Governance Manager

• Own and develop IT control frameworks (SOX, ITGC, ISO27001, COBIT, ITIL, NIST)
• Lead all internal and external IT audits end-to-end (readiness, execution, remediation)
• Maintain SOX narratives, RACMs, and control documentation
• Manage IT risk register and perform risk assessments
• Embed controls across change, access, incident, and operational processes
• Lead user access reviews and enforce segregation of duties
• Oversee GDPR-aligned data privacy controls and DPIAs
• Maintain and test Incident Response Plan (including tabletop exercises)
• Deliver executive reporting on risks, audits, and compliance posture
• Monitor regulatory changes and update controls accordingly
• Drive control automation and continuous improvement
• Deliver security and compliance awareness activities
• Partner with IT, InfoSec, Finance, Audit, Legal and business stakeholders
• Support NIS2 and UK/EU regulatory alignment where applicable
• Implement and optimise GRC / control automation tooling
• Own third-party / supplier assurance for technology risk
• Define and report KPIs (audit findings, remediation SLAs, control effectiveness)
• Provide oversight on emerging risks including AI governance and new technologies, We understand that some disabled applicants may, due to the nature of their disability, find some parts of the recruitment process challenging. If you need any reasonable adjustments during any part of the interview process, please make these known either to your interviewer or the person you liaise with when setting up your interview. #J-18808-Ljbffr

• 5+ years in IT audit, controls, governance or compliance
• Experience in regulated / FTSE or enterprise environments
• Strong knowledge of SOX, ITGCs, ISO27001, COBIT, ITIL, NIST
• Audit management and control framework implementation experience
• Understanding of GDPR and data privacy requirements
• Degree in IT, Information Systems or related field, * Self-starter with strong ownership mindset
• Strong stakeholder management and communication skills
• High attention to detail and analytical thinking
• Able to influence and embed controls across teams
• Organised and capable of managing multiple priorities

Waterstones is the cornerstone of bookselling across the UK and Ireland. Joining Waterstones means being an active part in a success story that began in 1982, and books are as popular now as the day we started.

Trading across the UK, Ireland and Europe, we are present in over 300 shopping locations, where Waterstones continues to thrive, each year actively pursuing a programme of new bookshop openings. Online at Waterstones.com, we meanwhile mirror the essence of our bookshops, further showcasing the unique enthusiasm and knowledge of our booksellers.

If you have the relevant essential experience and you are interested, we would love to hear from you.

Waterstones is committed to encouraging equity, diversity and inclusion in the workplace, and is dedicated toward eliminating unlawful discrimination.

Our aim is to be truly representative of all sections of society and our customers, and for each employee to feel fully respected and to be able to give their best.