IT Governance Lead

The IT Operations & Technical Governance Lead ensures ICP’s IT environment remains secure, well-governed, documented, auditable and operationally resilient. The role focuses on IT governance, ISO 27001 maintenance, Microsoft 365 and Azure governance, risk management, documentation, compliance, and project-to-BAU transitions.

Purpose of the role

• Maintain effective IT governance, operational continuity and control evidence.
• Support ISO 27001 post-certification activity, surveillance readiness and continual improvement.
• Keep technical documentation, runbooks, architecture records and ownership models current.
• Coordinate IT risk tracking, change control, Microsoft Purview activity and secure data collection.
• Ensure new projects transition cleanly into business-as-usual support with clear ownership.

Key Responsibilities

IT Operations & Governance

• Own and enhance IT governance processes, ensuring clear service ownership, support models, escalation pathways, and operational reporting across the technology estate.

Technical Documentation & Knowledge Management

• Maintain and continuously improve technical documentation, including architecture diagrams, runbooks, SOPs, design records, and project handover materials, ensuring operational resilience and knowledge retention.

ISO 27001 & Compliance

• Support the ongoing management of the Information Security Management System (ISMS), coordinating evidence collection, control ownership, audit readiness, surveillance activities, and continual improvement initiatives.

Microsoft Purview & Data Governance

• Coordinate Microsoft Purview and eDiscovery activities, supporting Subject Access Requests (SARs), evidence collection, audit trails, and the secure handling of sensitive information.

Microsoft 365, Azure & Security Governance

• Monitor and report on security and compliance metrics across Microsoft 365 and Azure, including Secure Score, Exposure Score, Defender recommendations, vulnerability management, and remediation progress.

Change, Risk & Control Management

• Ensure high-risk technology changes are appropriately documented, risk assessed, approved, and supported by auditable evidence, maintaining strong governance and regulatory compliance.

Risk, Incident & Supplier Assurance

• Maintain technology risk registers, supplier assurance records, penetration testing results, and incident follow-up actions, driving remediation and reducing organisational risk exposure.

Project Transition & Operational Readiness

• Ensure new technologies and projects transition seamlessly into Business-as-Usual support, with clear ownership, support processes, documentation, and operational accountability in place.

Essential skills and experience

• Experience in IT operations, technical governance, service management or technology leadership.
• Good working knowledge of Microsoft 365, Azure, Entra ID, Intune, Defender and Purview.
• Experience with ISO 27001, audit evidence, IT risk management, compliance and change control.
• Strong documentation, stakeholder management and business communication skills.
• Ability to translate technical risk and control requirements into clear business language.

Key attributes

Structured, documentation-focused, security-conscious, risk-aware, commercially pragmatic, calm under pressure, accountable and comfortable working with senior stakeholders.

Success measures

• IT services and control processes are clearly documented, owned and resilient.
• ISO 27001 evidence remains current and surveillance-ready.
• Risks, vulnerabilities, recommendations and remediation actions are tracked and visible.
• Purview/SAR activity is repeatable, secure and auditable.
• Leadership has clear visibility of IT risk, operational maturity and open actions.

Someone who exemplifies our ICP Values:

• Curious: Always learning, eager to explore endless possibilities.
• Inclusive: Diversity is our strength. Every voice matters and we can achieve more when we do it together.
• Focused: With clear vision and unwavering dedication, we progress forward and deliver excellence.
• Creative: Unleashing imagination, innovating boldly, and redefining possible.
• Trustworthy: Built on honesty, respect, and integrity we stand strong together.