Security Governance and Assurance Manager

About the role

Johnson Matthey is seeking a Security Governance and Assurance Manager to lead the development and execution of its global security framework. You will work across sites worldwide, ensuring policies, standards, and risk classifications align with the company’s risk appetite.

Key responsibilities

• Own and continuously improve the Global Security Policy, Standards and site risk classification.
• Design, maintain and deliver a Level 2 security assurance programme for all JM and relevant third‑party sites.
• Partner with Group Security operations and business units to plan and conduct on‑site security assurance audits and assessments.
• Coordinate with Group Assurance and Risk teams to support Level 3 security audits and follow‑up actions.
• Track, report and drive closure of actions arising from security assurance activities.
• Support global security programmes such as penetration testing, data governance, continuous improvement initiatives and training.

Required profile

• Recognised qualification in Security, Business Management or a related discipline.
• Proven experience identifying security risks, conducting security assurance or audit activities and recommending pragmatic mitigation actions.
• Strong knowledge of physical, technical and procedural security controls and their implementation.
• Ability to manage multiple priorities across geographically dispersed locations.
• Experience working with security‑related data, reporting and analysis to support decision‑making.

Required skills

• Penetration testing
• Data governance
• Security assurance audits

What we offer

• Competitive salary aligned with role, experience and responsibilities.
• Annual Incentive Plan.
• Employee Assistance Program.
• Paid volunteering opportunities and employee recognition programmes.