The Football Association
Security Governance Audit Lead
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Role Overview
Digital Technology plays a critical role in protecting The FA's people, platforms, products, and data. As our Technology landscape continues to evolve, we're looking for an experienced Security Governance Audit Lead to strengthen our governance, assurance, and compliance capabilities.
This is a newly created role that will take ownership of Information Security governance, audit management, and compliance across The FA's Digital Technology function. Acting as the focal point for security governance activities, you'll lead our ISO 27001 programme, coordinate internal and external audits, drive continuous improvement initiatives, and provide meaningful reporting that enables better decision-making across the organisation.
This role offers a unique opportunity to shape and mature The FA's security governance framework while working with a broad range of stakeholders across Technology, Risk, Legal, Procurement, and the wider business. We're looking for someone who can operate independently, build credibility quickly, and act as a trusted advisor on governance, risk, and compliance matters.
Responsibilities
- Lead the ongoing development, implementation, and maturity of The FA's Information Security Management System (ISMS).
- Own and manage The FA's ISO 27001 compliance roadmap, ensuring the organisation maintains certification readiness and continues to improve security maturity.
- Chair governance forums and quarterly stakeholder meetings relating to ISO 27001 and security assurance activities.
- Manage the internal and external security audit programme, coordinating activities across multiple stakeholders and ensuring successful audit outcomes.
- Drive governance, compliance, and assurance activities across Digital Technology, ensuring effective controls are in place and operating as intended.
- Develop, maintain, and communicate meaningful security KPIs, KRIs, and management information that provide insight into organisational risk and compliance performance.
- Produce high-quality reporting and presentations for technical and non-technical audiences, including senior leadership forums.
- Review security policies, standards, and controls, recommending improvements where required.
- Partner with technical teams to assess compliance with information security requirements, including access management, monitoring, vulnerability management, and related controls.
- Support supplier assurance and governance activities, including security due diligence, control reviews, and procurement assessments.
- Support security awareness and culture initiatives, helping to embed positive security behaviours across the organisation.
- Oversee the governance of security incidents, ensuring lessons learned, remediation actions, and improvement activities are appropriately tracked and delivered.
- Support business continuity and resilience governance activities, identifying risks, gaps, and opportunities for improvement.
- Build strong relationships across internal teams and external partners, acting as a trusted subject matter expert on governance and compliance matters.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential For The Role
- Significant experience working in Information Security Governance, Risk, Compliance, Audit, or Security Assurance roles.
- Demonstrable experience implementing, managing, or maturing an ISO 27001 Information Security Management System.
- Strong knowledge of ISO 27001 controls, requirements, and audit processes.
- Experience planning, coordinating, and managing internal and external audits.
- Experience creating governance reporting, dashboards, KPI packs, and management information for senior stakeholders.
- Excellent written communication skills, including the ability to produce policies, reports, recommendations, and executive briefings.
- Strong presentation and stakeholder management skills, with the ability to tailor messages to technical and non-technical audiences.
- Proven ability to build strong relationships and influence stakeholders across multiple levels of an organisation.
- Experience managing multiple priorities and driving actions through to completion with minimal supervision.
- Highly organised, self-motivated, and capable of operating independently in a standalone specialist role.
- Strong analytical and problem-solving skills, with the ability to identify risks and implement pragmatic solutions.
- Experience working with third-party suppliers and managing compliance or assurance activities.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Beneficial to Have
- Lead Auditor, Lead Implementer, or equivalent ISO 27001 certification.
- Experience working with NIST Cybersecurity Framework or related control frameworks.
- Experience supporting supplier assurance, procurement security reviews, and third-party risk management.
- Knowledge of business continuity, resilience, and incident management governance.
What's in it for you?
- An opportunity to build and shape a critical capability within one of the most recognisable organisations in sport.
- Autonomy to lead The FA's security governance and audit agenda, influence senior stakeholders, and drive improvements that strengthen how we protect our systems, services, and data.
- Competitive salary and great opportunities to develop and grow in your role.
- Range of exciting benefits, including:
- Access to event day tickets at Wembley Stadium and regular internal events.
- Free, nutritious lunches at Wembley Stadium and St. George's Park.
- Private medical cover funded by The FA.
- Contributory pension scheme.
- Additional 'Thank You' day's leave, volunteering days, and 25 days of annual leave.
- Hybrid working model offering greater flexibility.
Working at The FA
- Unique office spaces under the arch of the iconic Wembley National Stadium.
- Elite Performance Centre, St. George's Park in Staffordshire.
- Commitment to diversity and inclusion.
- Equal opportunities employer.
- DBS check required as part of the FA's commitment to ensuring a safe environment for everyone in football.
For more information on what it is like to work at The FA, please visit our FA Careers page.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location