The Group Risk, Information Security & Compliance Manager is responsible for leading and managing the organisation's enterprise information security, IT risk, governance, compliance, and assurance functions across the Group. The role is accountable for maintaining and improving the organisation's security posture, ensuring compliance with applicable regulatory and industry standards, and overseeing the governance and continuous improvement of frameworks including ISO standards and PCI DSS. The incumbent will work closely with executive management, operational teams, auditors, regulators, customers, and external service providers to ensure the organisation maintains secure, compliant, resilient, and audit-ready operations across both physical and digital information management environments. Minimum Qualifications: Bachelor's degree in Information Technology, Information Security, Risk Management, Computer Science, or related field. Relevant industry certifications such as: CISSP CISM CRISC ISO 27001 Lead Implementer or Lead Auditor PCI DSS related certifications COBIT ITIL Experience Required: Minimum 5 - 10 years' experience in Information Security, Risk, Compliance, Governance, or related fields. Experience managing ISO certification environments. Strong understanding and practical experience with PCI DSS compliance. Experience working within highly regulated industries such as: Banking Healthcare Financial Services Records Management Enterprise Managed Services Experience coordinating audits and engaging with enterprise customers. Experience managing security governance across multi-site or multi-country environments will be advantageous.