> Markdown version of [/jobs/ext/2304260-information-technology-governance-manager](https://www.wearedevelopers.com/jobs/ext/2304260-information-technology-governance-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Technology Governance Manager

- **Company:** Waterstones
- **Location:** Solihull, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Disk Controller, Information Technology Audit, IT Management, IT General Controls (ITGC)
- **Published:** August 30, 2026
- **Apply:** https://www.collegerecruiter.com/job/2815448863-information-technology-governance-manager

## About the Role

* 5+ years in IT audit, controls, governance or compliance
 * Experience in regulated / FTSE or enterprise environments
 * Strong knowledge of SOX, ITGCs, ISO27001, COBIT, ITIL, NIST
 * Audit management and control framework implementation experience
 * Understanding of GDPR and data privacy requirements
 * Degree in IT, Information Systems or related field, * Self-starter with strong ownership mindset
 * Strong stakeholder management and communication skills
 * High attention to detail and analytical thinking
 * Able to influence and embed controls across teams
 * Organised and capable of managing multiple priorities

## Description

* Own and develop IT control frameworks (SOX, ITGC, ISO27001, COBIT, ITIL, NIST)
 * Lead all internal and external IT audits end-to-end (readiness, execution, remediation)
 * Maintain SOX narratives, RACMs, and control documentation
 * Manage IT risk register and perform risk assessments
 * Embed controls across change, access, incident, and operational processes
 * Lead user access reviews and enforce segregation of duties
 * Oversee GDPR-aligned data privacy controls and DPIAs
 * Maintain and test Incident Response Plan (including tabletop exercises)
 * Deliver executive reporting on risks, audits, and compliance posture
 * Monitor regulatory changes and update controls accordingly
 * Drive control automation and continuous improvement
 * Deliver security and compliance awareness activities
 * Partner with IT, InfoSec, Finance, Audit, Legal and business stakeholders
 * Support NIS2 and UK/EU regulatory alignment where applicable
 * Implement and optimise GRC / control automation tooling
 * Own third-party / supplier assurance for technology risk
 * Define and report KPIs (audit findings, remediation SLAs, control effectiveness)
 * Provide oversight on emerging risks including AI governance and new technologies, We understand that some disabled applicants may, due to the nature of their disability, find some parts of the recruitment process challenging. If you need any reasonable adjustments during any part of the interview process, please make these known either to your interviewer or the person you liaise with when setting up your interview.
#J-18808-Ljbffr


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [Why Git Still Matters](https://www.wearedevelopers.com/videos/100288-why-git-still-matters)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career)

## Related Articles

- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)