Governance & Compliance Manager

Overview

In this role you will safeguard Burberry’s IT governance and compliance processes, ensuring policies are current, evidenced, and auditable. You will work with IT risk, cyber assurance, and platform teams to embed governance across the IT landscape. Your impact lies in maintaining policy registers, coordinating reviews, and facilitating effective audit readiness. This position offers a chance to influence how governance drives secure, compliant technology in a creative, globally active brand. You’ll operate in a cross-functional environment that values collaboration and proactive risk management.

Responsibilities

• Maintain IT security policy and standards registers with clear ownership, review dates, and communication plans
• Coordinate policy and standards review cycles with accountable owners
• Coordinate compliance assessments against internal policies and external requirements (PCI-DSS, GDPR, ISO 27001 or equivalents)
• Support internal and external audits by preparing evidence packs and tracking remediation actions
• Manage the governance calendar with policy reviews, compliance assessments, audit milestones, and evidence refresh cycles
• Maintain governance documentation and evidence repositories ensuring they are structured, current, traceable and audit-ready
• Track compliance status, exceptions, control gaps and remediation progress, escalating issues via governance routes
• Collaborate with domain-aligned, platform, and enabling teams to embed compliance into ways of working
• Align with IT Risk Manager to reflect gaps in risk reporting; align with Cyber Assurance for connected evidence and reporting
• Support regulatory and contractual compliance activity intersecting with IT and cyber governance
• Prepare compliance reports and governance materials for Senior Manager, Governance, Risk & Compliance and relevant forums

Key requirements

• Experience in IT governance, compliance, audit support or control management within a technology environment
• Understanding of compliance frameworks and regulatory requirements (PCI-DSS, GDPR, ISO 27001, NIST or equivalents)
• Experience maintaining policy registers, governance calendars, evidence repositories and audit documentation
• Strong organisational skills with attention to detail and the ability to manage multiple reviews and deadlines
• Effective communicator across technical and non-technical teams to operationalise compliance requirements
• Experience supporting internal or external audits, compliance assessments and remediation tracking
• Understanding of IT risk, cyber controls, supplier obligations and security governance processes is beneficial

• effective communicator
• strong organizational skills
• stakeholder management
• IT governance
• compliance management
• audit support

…