Cyber Security Compliance Lead

Summary

Cyber Security Compliance Manager

Join us and help protect the data that protects our residents.

At Notting Hill Genesis (NHG), we’re on a mission to ensure our systems and data are resilient, compliant, and secure – protecting the trust of over 60,000 residents across London. As Cyber Security Compliance Lead / Manager, you’ll be at the forefront of our efforts to strengthen governance, manage risk, and maintain compliance across our digital landscape.

You’ll work closely with colleagues across the organisation to embed security standards, manage frameworks such as NIST, ISO
27001, and Cyber Essentials, and ensure we meet evolving regulatory expectations. This is a key role where your expertise will shape our cyber resilience and make security a proactive business enabler.

• Define and maintain cyber security policies and procedures, ensuring compliance with key frameworks such as NIST, ISO
  27001, and Cyber Essentials Plus.
• Lead and coordinate cyber audits, vulnerability management, penetration testing, and disaster recovery oversight.
• Manage governance and oversight of risk management processes, ensuring SLAs and compliance objectives are achieved.
• Communicate cyber security goals and performance to senior management and governance committees.
• Monitor supplier security performance and risk, ensuring third‑party assurance.
• Stay current with changes to legislation and standards, including UK GDPR, DPA, and PCI‑DSS.
• Support the development of strategic compliance plans and cyber maturity roadmaps to improve visibility, resilience, and trust.
• Collaborate with Governance, Risk, and Data Protection teams to maintain alignment and best practice across NHG.

Hybrid working is available, with at least two days a week based in an office or site location, and the remainder from home where appropriate.

You’re a passionate and proactive security professional with the technical depth and leadership to make a difference. You combine a solid understanding of compliance frameworks with the ability to engage, influence, and drive continuous improvement across diverse teams.

• CISSP (or equivalent) professional qualification.
• Substantial experience in a cyber governance, risk, or compliance role.
• Strong working knowledge of ISO
  27001, NIST 800-53, and Cyber Essentials Plus accreditation.
• Experience of vulnerability and risk management processes.
• Working understanding of data protection legislation including UK GDPR, DPA, and PCI‑DSS.
• Experience engaging with security and threat intelligence networks such as NCSC.
• Project management qualification (Prince2, Agile) preferred.

• Compassionate – putting people and residents at the heart of decisions.
• Progressive – striving for continuous improvement and innovation.
• Dependable – consistently delivering high‑quality, reliable outcomes.
• Inclusive – valuing diversity and collaboration across all teams.
• Empowered – enabling others to achieve their best.

Once you join us, you’ll find plenty of opportunities to grow within our organisation. You’ll also have access to a wide range of learning and development options to help you achieve and maximise your potential.

• Excellent annual leave allowance and flexible working opportunities (qualifying period may apply)
• Generous pension scheme
• Enhanced maternity, paternity, and adoption pay (qualifying period may apply)
• Employee assistance – free confidential advice and counselling services
• Health cash plan
• Staff discounts across hundreds of retailers, gyms, restaurants, and entertainment venues
• Interest‑free loans (season ticket, tenancy deposit, and training loans)
• Cycle to work scheme
• Life Assurance – 4x annual salary

Notting Hill Genesis is a not‑for‑profit organisation providing affordable homes for Londoners and it is now one of the largest housing associations in London. We are both a landlord and a developer, with more than 65,000 existing homes and 10,000 more in our pipeline and we employ around 1,800 employees.

For more information on what we do and what makes us different please visit:

We welcome applications from…