Cyber Governance, Risk Compliance Manager

Overview

This role is central to strengthening and advancing the organization’s cybersecurity control framework across global operations. As a strategic and hands-on cyber risk professional, you will drive consistency, compliance, and maturity in cyber governance, risk management, and audit practices, directly supporting the Regional Director of Cyber Security. The successful candidate will have a proven background in cyber risk and compliance functions within regulated industries, demonstrating both tactical and strategic expertise.

Experience in managing cyber risk across multiple jurisdictions (US, UK, EU) and driving regulatory alignment is essential. You will be highly organized, detail-oriented, and documentation-focused, with the ability to influence and build collaborative relationships at all levels. This role is a functional management role, non-supervisory, that will have ownership of and directly responsible for daily execution of GRC tasks.

• Lead and develop GRC practices: champion the development and implementation of global Cyber GRC practices, ensuring robust cyber risk management and governance across all business units.
• Policy and standards management: maintain, enhance, and align cybersecurity policies, standards, and documentation to meet regulatory, audit, and business requirements.
• Vendor and third‑party assurance: oversee vendor and third‑party due diligence, supplier notifications, and control assurance activities to safeguard organisational interests.
• Risk monitoring and reporting: utilize industry‑standard tools to monitor, assess, and report on cyber risks, translating technical findings into actionable insights for senior stakeholders.
• Stakeholder engagement: prepare board‑level reporting and engage with executive leadership across global regions, simplifying complex technical risk concepts for non‑technical audiences.
• Collaboration:
  
  work closely with Technology and Cyber Operations teams to ensure alignment and effective risk mitigation.

• Deep understanding of cyber risk management frameworks (NIST, ISO 27001, CRI Cyber Risk Profile).
• Experience with regulatory compliance and alignment across global jurisdictions.
• Strong communication skills, capable of translating technical risk into clear, executive‑level reporting.
• Highly developed influencing skills, able to build buy‑in and foster a positive cybersecurity culture.
• Proven track record in cyber risk management, policy development, and audit readiness.
• Demonstrable experience in cyber risk and compliance roles within regulated industries.
• Experience overseeing vendor and third‑party risk management.
• Proven ability to manage and deliver complex projects across multiple geographies.
• Experience engaging with senior stakeholders, including board‑level executives.

• Experience with CMMC certification audits or as a CMMC Certified Assessor or Professional certified.
• Supporting governance or accreditation of IT systems used in support of US defense contracts.

Element is one of the fastest growing testing, inspection and certification businesses in the world. Globally we have more than 9,000 brilliant minds operating from 270 sites across 30 countries. Together we share an ambitious purpose to ‘Make tomorrow safer than today’.

When failure in use is not an option, we help customers make certain that their products, materials, processes and services are safe, compliant and fit for purpose. From early R&D, through complex regulatory approvals and into production, our global laboratory network of scientists, engineers, and technologists support customers to achieve assurance over product quality, sustainable outcomes, and market access.

While we are proud of our global reach, working at Element feels like being part of a smaller company. We empower you to take charge of your career, and reward excellence and integrity with growth and development.

Industries across the world depend on our care, attention to detail and the absolute accuracy of our work. The role we have to play in creating a safer world is much bigger than our organization.

At…