IT Compliance & Service Manager

NRG. Middlesbrough, England, United Kingdom

NRG. Middlesbrough, England, United Kingdom

IT Compliance & Service Manager

Location – Middlesbrough (Hybrid)

My client is a medium-sized, fast-moving business seeking a technically strong IT Compliance & Service Manager to lead their ISO
27001 compliance programme and oversee IT service delivery. You’ll manage outsourced IT service providers, execute our information security management system (ISMS), and ensure effective Microsoft 365 governance.

This is a senior, high-impact role requiring initiative, technical depth, and strong vendor relationship management skills. You'll think independently, propose solutions, and advocate for IT governance best practices across the organisation.

Key Responsibilities ISO 27001 & IT Governance

• Execute ISMS rollout and maintain policies, processes, and controls aligned with ISO 27001
• Develop and maintain IT security policies, procedures, and standards
• Support internal audits, risk assessments, and compliance reporting
• Help steer the overall ISMS programme and ensure audit readiness

Third-Party Service Management & ITSM

• Manage strategic relationships with IT service providers and oversee SLA performance
• Lead vendor selection processes and coordinate between multiple service providers
• Oversee day-to-day IT operations and manage incident, request, and change processes
• Drive continuous improvement initiatives aligned with ITIL frameworks

Microsoft 365 Governance

• Work with service providers to ensure M365 is configured, secured, and optimised
• Develop governance policies and promote best practices across the business
• Monitor compliance with licensing and security requirements

Stakeholder Engagement

• Serve as IT representative on the Risk Committee and contribute to the Change Board
• Partner with internal teams on facilities-related IT requirements
• Act as trusted advisor to business leaders on IT governance and compliance matters

Required Skills & Experience

• Proven experience in IT compliance, governance, or service management roles
• Strong knowledge of Microsoft 365 capabilities, security, and administration
• Experience managing outsourced IT providers and vendor relationships
• Solid understanding of ISO 27001 and ISMS implementation
• Knowledge of ITSM frameworks (ITIL) and service delivery best practices
• Strong vendor management and stakeholder engagement abilities
• Proactive, solutions-oriented mindset with excellent problem-solving skills

Desirable Qualifications

• ISO 27001 Lead Implementer or Auditor certification
• Microsoft certifications (MS-100, MS-101, Security-focused)
• ITIL Foundation or higher certification
• Experience in medium-sized business or scale-up environment

• Seniority level
  
  Mid-Senior level

• Employment type
  
  Full-time

• Job function
  
  Information Technology
• Industries
  
  IT Services and IT Consulting and Computer and Network Security

Referrals increase your chances of interviewing  2x

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.