Information Technology Governance Manager

About the jobIT Governance Risk & Controls Manager PermanentHybrid Based in London with travel to Solihull and Burton Upon TrentWe are looking for someone to join us in this newly created role to lead IT governance, audit, risk, and compliance across the Waterstones group. The successful candidate will ensure strong IT controls, regulatory alignment, and a resilient, audit-ready control environment supporting secure and effective business operations.What you will be doingOwn and develop IT control frameworks (SOX, ITGC, ISO27001, COBIT, ITIL, NIST)Lead all internal and external IT audits end-to-end (readiness, execution, remediation)Maintain SOX narratives, RACMs, and control documentationManage IT risk register and perform risk assessmentsEmbed controls across change, access, incident, and operational processesLead user access reviews and enforce segregation of dutiesOversee GDPR-aligned data privacy controls and DPIAsMaintain and test Incident Response Plan (including tabletop exercises)Deliver executive reporting on risks, audits, and compliance postureMonitor regulatory changes and update controls accordinglyDrive control automation and continuous improvementDeliver security and compliance awareness activitiesPartner with IT, InfoSec, Finance, Audit, Legal and business stakeholdersSupport NIS2 and UK/EU regulatory alignment where applicableImplement and optimise GRC / control automation toolingOwn third-party / supplier assurance for technology riskDefine and report KPIs (audit findings, remediation SLAs, control effectiveness)Provide oversight on emerging risks including AI governance and new technologiesWhat we need from you5+ years in IT audit, controls, governance or complianceExperience in regulated / FTSE or enterprise environmentsStrong knowledge of SOX, ITGCs, ISO27001, COBIT, ITIL, NISTAudit management and control framework implementation experienceUnderstanding of GDPR and data privacy requirementsRelevant certifications (CISA, CRISC, CISSP desirable)Degree in IT, Information Systems or related fieldPerson ProfileSelf-starter with strong ownership mindsetStrong stakeholder management and communication skillsHigh attention to detail and analytical thinkingAble to influence and embed controls across teamsOrganised and capable of managing multiple priorities Why work for WaterstonesWaterstones is the cornerstone of bookselling across the UK and Ireland. Joining Waterstones means being an active part in a success story that began in 1982, and books are as popular now as the day we started.Trading across the UK, Ireland and Europe, we are present in over 300 shopping locations, where Waterstones continues to thrive, each year actively pursuing a programme of new bookshop openings. Online at Waterstones.com, we meanwhile mirror the essence of our bookshops, further showcasing the unique enthusiasm and knowledge of our booksellers.If you have the relevant essential experience and you are interested, we would love to hear from you.Waterstones is committed to encouraging equity, diversity and inclusion in the workplace, and is dedicated toward eliminating unlawful discrimination.Our aim is to be truly representative of all sections of society and our customers, and for each employee to feel fully respected and to be able to give their best.Diversity StatementAt Waterstones, we are committed to creating a workplace that is fair and inclusive to people from all backgrounds, perspectives and experiences, and we strive to promote an inclusive work culture.We are working hard to ensure our recruitment processes are free from bias, and our aim is to be truly representative of all sections of society and our customers, and for each employee to feel fully respected and able to give their best.Reasonable AdjustmentsWe understand that some disabled applicants may, due to the nature of their disability, find some parts of the recruitment process challenging. If you need any reasonable adjustments during any part of the interview process, please make these known either to your interviewer or the person you liaise with when setting up your interview.