> Markdown version of [/jobs/ext/3678107-it-security-governance-lead](https://www.wearedevelopers.com/jobs/ext/3678107-it-security-governance-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Governance Lead

- **Company:** The Clear
- **Location:** Sale, UK
- **Experience:** Expert
- **Salary:** £35,001.0 - £50,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Audit Trail, Business Systems, Cyber Security, PCI Data Security Standards, Software Vulnerability Management, Information Security Management System
- **Published:** October 11, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5923017000

## About the Role

* Experience working in information security governance, risk, compliance, audit or assurance environments.
 * Experience supporting security frameworks, standards and certifications such as ISO 27001, Cyber Essentials, PCI DSS, GDPR or other regulated environments.
 * Experience coordinating audits, managing evidence, engaging stakeholders and tracking remediation activities.
 * Experience conducting security risk assessments and maintaining risk or issue registers, with the ability to apply sound risk-based judgement.
 * Strong documentation skills, with the ability to produce clear and structured policies, procedures, governance records and audit materials.
 * Ability to build effective working relationships across technical and non-technical teams and communicate security concepts clearly to different audiences.
 * A proactive approach to managing priorities, driving actions to completion and improving governance, assurance and control maturity.
 * Confidence working independently while maintaining accurate governance, risk and audit records, supported by strong Microsoft 365 skills.

## Description

As IT Security Governance Lead, you'll play a key role in helping to protect business systems and technology services through effective security governance, risk management and compliance activities. Working closely with Technology teams, Legal, Compliance & Risk and wider business stakeholders, you'll support and continuously improve the Information Security Management System (ISMS) and associated governance frameworks. From supporting audits, certifications and supplier assurance activities to managing security risks and reporting, you'll help ensure security obligations are met, controls remain effective and stakeholders have the insight they need to make informed decisions.

What we want you to do

 * Develop, maintain and review information security policies, standards, procedures and governance documentation.
 * Maintain and continually improve the Information Security Management System (ISMS) and governance framework aligned to ISO 27001.
 * Support security certifications, audits and compliance activities, ensuring evidence is prepared and obligations are effectively managed.
 * Identify, assess and report information security risks, maintaining risk registers and coordinating mitigation and treatment activities with stakeholders.
 * Coordinate internal and external security audits, managing findings, assurance activities and remediation actions through to completion.
 * Conduct supplier security assurance and due diligence activities, supporting security reviews throughout the supplier lifecycle.
 * Provide governance, risk and control assurance input into technology changes, projects, vulnerability management and emerging technology assessments.
 * Produce security reporting, dashboards and governance updates, supporting informed decision-making across relevant forums and committees.

What success in the role looks like

 * Information security governance documentation is accurate, up to date, approved and consistently embedded across the business.
 * Security audits are well coordinated, evidence is complete and findings are effectively managed through to closure.
 * Information security risks are identified, assessed, reported and managed in line with agreed governance processes.
 * Compliance obligations and certification requirements are supported through clear ownership, robust evidence and effective action tracking.
 * Security reporting provides meaningful insight into risk, compliance, vulnerability management and remediation progress, enabling informed decisions and stronger controls.