We are seeking a highly capable Technology Governance Manager to lead and mature the governance, risk, and compliance framework across our Technology function. In this role, you will ensure that technology risk, change, and information security are effectively managed, and that policies, controls, and governance practices actively support business performance.
You will own and develop our technology governance framework, maintain compliance with key standards such as ISO 27001 and Cyber Essentials Plus, embed a culture of secure‑by‑design principles, and ensure that governance is practical, usable, and outcome‑driven. You’ll work closely with senior stakeholders, the Information Security team, and technology partners to reduce risk, ensure compliance, and support the organisation’s ongoing growth and stability.
This is an exciting opportunity for someone who enjoys shaping policy, managing risk, influencing culture, and ensuring that strong governance underpins high‑quality service delivery.
Please note that we will be interviewing throughout the duration of this advert. Therefore if you are interested in this role an early application is advised as we may close the advert prior to the advertised date.
We’re looking for someone who brings:
- Excellent communication and stakeholder‑management skills
- CISSP or CISSM qualification
- ISO 27001 qualifications/experience (highly desirable)
- ITIL v3 knowledge (desirable)
- Strong document management and policy‑writing skills
- Demonstrable experience delivering security best practice, risk management, and change governance
- Experience coordinating internal/external audits and managing compliance activities
- Project management experience and the ability to lead improvements end‑to‑end
- High‑level understanding of enterprise IT functions (ideally within private medical or similar industries)
- Ability to prioritise effectively and own issues through to resolution
Experience managing or guiding others.
- Develop, maintain, and improve the Technology Governance Framework
- Ensure governance aligns with organisational risk frameworks and supports business performance
- Embed “secure by design” and risk‑aware decision‑making
- Own and maintain all Technology policies, standards, and guidelines
- Ensure compliance with internal and external governance requirements (ISO 27001, CE+, regulatory standards)
- Provide governance content for tenders and bids
- Own the Technology Disaster Recovery Plan and ensure structured, reliable recovery processes
- Simplify governance where possible without compromising accreditation
- Own and manage the Technology Risk Register
- Identify, assess, and prioritise risks across systems, suppliers, and services
- Ensure mitigations and remediation plans are in place and tracked
- Provide clear reporting of risk posture to senior leadership
- Manage technology change across services, infrastructure, and solutions
- Ensure change processes remain effective and support delivery velocity
- Promote a risk‑based assessment approach rather than blanket checks
- Work closely with the Information Security Manager / DPO
- Ensure cyber and security controls align with business risk appetite and compliance frameworks
- Promote best practice across access control, configuration, monitoring, and data protection
- Coordinate internal and external security audits and certification activities
- Track and close non‑conformities and improvement actions
- Provide structured compliance reporting for stakeholders including Group, shareholders, customers, and insurers
- Monitor and audit technology suppliers against governance and security requirements
Alliance Medical are Europe’s leading independent provider of imaging services.
We combine service excellence and innovative imaging technologies to improve patient care and support NHS and independent organisations with their ongoing imaging requirements. Our approach has delivered consistent company growth for more than 30 years.
We live by our company values to ensure the highest level of patient care:
Our Values
Leaders, managers, and supervisors have a particular responsibility to be role models in terms of how they demonstrate these values themselves and how they engage their teams to work in this way.
Collaboration:
We work together and in partnership for all our patients. We respect expertise and combine it to achieve more.
Excellence:
We never compromise. We strive to deliver the very best in everything we do to ensure the highest quality of care. We treat our patients and each other with compassion, dignity and respect.
Learning:
Knowledge and understanding comes from learning. At Alliance Medical we are committed to ensuring that each and every one of us keeps on learning and that we continuously look for improved ways of working.
Efficiency:
Efficiency in healthcare means more patients get better care. We constantly seek new ways to use the scarce resource of healthcare more intelligently so that more people can live longer, fuller lives.
Openness:
We act with transparency and honesty in everything we do, where staff are encouraged to speak up to ensure a safe and secure environment for our patients.
