Totum Partners
Cyber Security Risk & Governance Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
An exciting opportunity has arisen for an experienced Cyber Security Risk & Governance Manager to join a leading professional services organisation.
This is a standalone role with responsibility for cyber security governance, risk and compliance across the business. Working closely with the Head of IT Architecture & Governance, you'll act as the subject matter expert for security governance, influencing technology decisions and ensuring security is embedded across projects and IT operations. Operational security activities are managed by a separate engineering function, allowing you to focus on governance, assurance and strategic oversight.
Key Responsibilities
- Developing and maintaining cyber security policies, standards and governance frameworks.
- Leading security audits, risk assessments and compliance activities, including ISO 27001 and Cyber Essentials Plus.
- Embedding security-by-design across technology projects and architecture.
- Managing the cyber risk register and advising senior stakeholders on cyber risk and compliance.
- Reviewing third-party suppliers from a security perspective and driving continuous improvement across the firm's security posture.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
We're looking for someone with:
- Proven experience in cyber security governance, risk and compliance.
- Strong knowledge of ISO 27001, NIST, CIS Controls or similar frameworks.
- Experience working with Microsoft Azure and Microsoft 365 environments.
- Excellent stakeholder management and communication skills.
- Certifications such as CISSP, CISM or CCSP would be advantageous.
This is an excellent opportunity for someone who enjoys influencing security strategy, working closely with senior stakeholders and shaping governance across a modern technology environment. As the organisation's dedicated governance specialist, you'll have the autonomy to make a real impact while partnering with architecture, infrastructure and delivery teams across the business.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Equal Opportunities
As a responsible business, it is important that we represent the diversity of our people, our clients and our communities. We believe that the firms that thrive are those with the most diverse team; that's why we work so hard to source the best talent from the broadest pool possible. As an equal opportunities employer we strive to accommodate anyone who may have specific needs. If you require reasonable adjustments to be made during the selection process, please talk to a member of the recruitment team so that any required adjustments can be made in advance.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location