Cyber Security Manager – Governance, Risk and Compliance (GRC)

Job Advert Skip to main content Cookies on NHS Jobs We've put some small files called cookies on your device to help us make improvements to our site. To improve our site we'd also like to use cookies which will send information to Google Analytics. You can read more about our cookies before you choose. Accept analytics cookies Do not accept analytics cookies Jobs Menu Sign in Create an account English Cymraeg Menu Close menu Search Sign in Create an account Display in Welsh (Cymraeg) Search Sign in Create an account Display in Welsh (Cymraeg) BETA Your feedback will help us to improve this service. Essex Partnership University NHS Foundation Trust Cyber Security Manager – Governance, Risk and Compliance (GRC) The closing date is 18 October 2026 Apply for this job Job summary Cyber Security Manager - Governance, Risk and Compliance (GRC) Band 7 - £49,387 - £56,515 per annum Thurrock Community Hospital Are you ready to lead cyber security at scale in a complex, mission-driven organisation where your work truly matters? We're looking for an experienced and passionate Cyber Security Manager - Governance, Risk & Compliance (GRC) to drive our cyber assurance agenda and strengthen the resilience of critical NHS services. Reporting directly to the Associate Director of Information Security (CISO), you will play a pivotal leadership role, shaping how we manage cyber risk, compliance, and governance across the Trust. This is more than a management role -- it's an opportunity to influence strategic decision-making, protect vital services, and lead meaningful change in an evolving cyber landscape. You'll work at the heart of the organisation, collaborating with senior stakeholders, technical teams, and external partners to ensure we meet the highest standards of cyber security and regulatory compliance. We're looking for someone who combines deep technical expertise with strong leadership , who thrives in a fast-paced environment, and who can translate complex cyber risks into clear, actionable insights. In return, you'll join a supportive, forward-thinking team where innovation is encouraged, professional growth is supported, and your impact will be visible across the organisation. If you're shortlisted, your interview will take place in October 2026 Main duties of the job As Cyber Security Manager - GRC, you will lead a high-quality governance, risk and compliance function, ensuring strong cyber assurance across the Trust. What you'll be doing: Lead Governance & Assurance Oversee cyber governance services, ensuring alignment with frameworks such as ISO 27001, CAF and DSPT. Manage the full lifecycle of policies and procedures, and deliver clear assurance reports and dashboards to senior and board-level stakeholders. Drive Risk & Compliance Identify, assess and mitigate cyber risks across the organisation. Ensure adherence to legislation, standards and best practice, and coordinate audit evidence and assurance activities. Strengthen Controls & Testing Lead the penetration testing programme, managing remediation plans and analysing security data, vulnerabilities and incidents to drive continuous improvement. Implement and monitor KRIs and control effectiveness. Enhance Incident Preparedness Develop and lead incident response planning, including tabletop exercises, working closely with operational, technical and information governance teams to improve resilience. Lead & Develop the Team Provide leadership, coaching and direction, managing resources and priorities while fostering a high-performing, collaborative culture. Engage Stakeholders Build strong relationships across teams, communicate complex risks in a clear, accessible way, and influence decision-making to secure buy-in for security initiatives. About us Valuing you. Recognising your dedication. At EPUT, we look after you. Receive supervision and support to help you fulfil your potential. Join an inclusive EPUT community and connect with others through engagement events and equali