Nextech Group Limited
Policy & Compliance Manager - Technical
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Title - Policy & Compliance Manager
Department - Technical
Reports to - Head of Technical
Location - Middlesbrough
Salary - £30,000 - £35,000
Contract - Permanent, full time
The role -
We are looking for someone to take ownership of our Policy & Compliance function and lead it. You'll sit in the Technical Department, alongside Service Desk, Networks, Projects, and Infrastructure, reporting into the Head of Technical.
The job blends hands-on technical credibility with compliance leadership. You'll hold our Cyber Essentials and GDPR positions internally, and build both into priced, revenue-generating service offerings for our client base, alongside penetration testing. You'll need to be comfortable standing by your decisions, confident in front of clients as well as colleagues, and happy to roll your sleeves up on technical work when the Desk needs a hand.
What you'll own –
Five areas of responsibility, each one yours to run rather than assist with.
-
Cyber Essentials - Internal and client-facing
- Project manage Cyber Essentials and Cyber Essentials Plus certification, for us and for clients
- Own scoping, evidence gathering, remediation planning, submission and renewal cycles
- Build it into a structured, priced product offering
-
GDPR and data protection - Including DPO services
- Own the GDPR roadmap: define milestones, close gaps, keep us compliant
- Apply ICO knowledge practically across registration, breach reporting, DSARs and records of processing activity
- Write customer data policies, IT acceptable use policies, and IT business continuity plans
- Act as Data Protection Officer for clients who buy the service
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
-
Compliance tooling - Within our Kaseya stack
- Own and administer Kaseya Compliance Manager, or an equivalent platform
- Use it to evidence and report on compliance posture, for us and for clients
-
Penetration testing - A new commercial line
- Lead and coordinate pen testing engagements, internally and for clients
- Build it into a commercial offering alongside Cyber Essentials
-
Policy and internal controls - The underlying discipline
- Apply change management when drafting and revising policy
- Create and maintain sound internal controls, and monitor adherence to them
- Audit policy, practices, and documents proactively to find weaknesses before anyone else does
- Train and educate employees and clients, and field their compliance questions
-
Service desk support - Occasional, not your day job
- Flex into Service Desk support when it's needed
- Keep enough technical grounding, and enough understanding of desk SLAs, to help efficiently without being a primary desk resource
One thing to be clear about
This is not a developmental role with extensive training and a long runway. We need someone who can pick it up and run with it from day one.
That means you already have the technical grounding and the compliance exposure to take ownership quickly, and you're comfortable operating with minimal supervision. If that's you, you'll have a function to shape and real commercial ownership of it.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
What you'll need
- A strong technical background, ready to step up
- Demonstrable experience with Cyber Essentials and Cyber Essentials Plus certification
- Knowledge of GDPR, ICO compliance, and general compliance controls such as the DPA
- Experience with Kaseya Compliance Manager or a similar GRC tool
- Pen testing exposure, whether scoping, coordinating, or delivering
- Experience writing and implementing company policy, plus business continuity work
- The confidence to lead internal and customer meetings
- Project management skills, and the drive to take an initiative to completion on your own
- A commercial mindset that treats compliance and security as a product, not a cost centre
- Excellent communication, integrity, professional ethics, and close attention to detail
Nice to have
- MSP experience
- Time spent in a compliance environment, full or part time
- Health or education sector experience
- General cyber security experience
- Professional certification such as CCEP. We'll support the right candidate through certification
Technical skills we'll expect
- Windows Server administration: AD, Group Policy, DNS, and DHCP
- Microsoft 365 and Azure AD administration
- Networking fundamentals: VLANs, firewalls, routing, and switching
- Backup and disaster recovery concepts
- RMM and PSA tooling, ideally the Kaseya stack
- Troubleshooting across desktop, server, and network estates
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London