About this role
Salary: £37,000 - 46,000 per year
Requirements: Experience working in information security governance, risk, compliance, audit or assurance environments.Experience supporting security frameworks, standards and certifications such as ISO 27001, Cyber Essentials, PCI DSS, GDPR or other regulated environments.Experience coordinating audits, managing evidence, engaging stakeholders and tracking remediation activities.Experience conducting security risk assessments and maintaining risk or issue registers, with the ability to apply sound risk-based judgement.Strong documentation skills, including producing clear and structured policies, procedures, governance records and audit materials.Ability to build effective working relationships across technical and non-technical teams and communicate security concepts clearly to different audiences.A proactive approach to managing priorities, driving actions to completion and improving governance, assurance and control maturity.Confidence working independently while maintaining accurate governance, risk and audit records, supported by strong Microsoft 365 skills. Responsibilities: Develop, maintain and review information security policies, standards, procedures and governance documentation.Maintain and continually improve the Information Security Management System (ISMS) and governance framework aligned to ISO 27001.Support security certifications, audits and compliance activities by preparing evidence and managing obligations.Identify, assess and report information security risks; maintain risk registers and coordinate mitigation and treatment activities with stakeholders.Coordinate internal and external security audits, managing findings, assurance activities and remediation actions through to completion.Conduct supplier security assurance and due diligence activities, supporting security reviews throughout the supplier lifecycle.Provide governance, risk and control assurance input into technology changes, projects, vulnerability management and emerging technology assessments.Produce security reporting, dashboards and governance updates to support informed decision-making across relevant forums and committees.Keep governance documentation accurate, current, approved and embedded across the business.Support effective audit evidence management, risk reporting, compliance tracking and remediation progress. Technologies: EmbeddedSupportMicrosoft 365MobileSecurityOffice 365 More:
As our IT Security Governance Lead, youll help protect business systems and technology services by supporting security governance, risk management and compliance in close collaboration with Technology, Legal, Compliance & Risk, and wider business stakeholders. We are Clear Business, one of the UKs leading providers of essential services to small businesses, offering services including phone, broadband, mobile, water, gas, electricity, payment services and insurance. We aim to simplify essential services for our customers and make our colleagues experiences more rewarding, with ambitious growth plans and opportunities to develop your career. This is a full-time, permanent role of 37.5 hours per week, with no weekend working and bank holidays off. Hybrid working may be available after successful completion of probation and demonstration of consistent performance. Our package includes a competitive salary, an annual bonus of up to 10%, 25 days holiday increasing to 28 with service, birthday leave, options to buy or sell annual leave, pension contributions, life assurance, retailer discounts, cycle-to-work and travel loans, wellbeing support, paid volunteering leave, charity matching, and on-site gym, parking and breakfast. We are committed to an inclusive team that celebrates diversity. Successful candidates will be subject to pre-employment checks, and the vacancy may close early if we receive enough suitable applications; we may retain applications for future opportunities.
last updated 42 week of 2026