Information Security Governance Manager

- Manage annual compliance programmes (e.g. PCI DSS v4, ISO 27001, SWIFT CSCF) - Coordinate control owners across departments - Maintain risk registers and control frameworks - Support internal and external audits - Manage the full policy lifecycle (creation, review, approval, publication) - Act as primary contact for external auditors and assessors - Prepare audit documentation and evidence packs - Track and drive remediation activities - Coordinate gap assessments and readiness reviews - Provide senior leadership with audit and risk reporting - Coordinate penetration testing and vulnerability assessments - Work with internal teams and third-party providers - Track remediation of security findings - Embed testing into change and release processes - Support supplier security due diligence - Develop and maintain security policies and standards - Ensure alignment with regulatory requirements - Facilitate policy review workshops - Maintain documentation repositories and version control - Identify opportunities to improve governance efficiency - Leverage automation and AI tools for documentation and tracking - Enhance reporting dashboards and visibility - Drive continuous improvement across security programmes - Work closely with Engineering, SRE, Compliance, and Operations teams - Integrate security governance into product and infrastructure changes - Support client due diligence and security questionnaires - Assist commercial teams with security assurance documentation