Technical Policy & Compliance Manager

Technical Policy & Compliance Manager in Middlesbrough (TS1), TS1 | Nextech Group Limited Find a job Post a job Sign up Tired of searching? Let’s find you the right jobs faster Get Started Search These jobs were popular with other job seekers International Trainee – Associate Project Manager Vattenfall Hexham, Northumberland 1 day ago Ecological Compliance and Consents Lead AECOM North East 1 week ago Internal Controls - Manager Cummins Darlington, County Durham 1 day ago SUPPLIER DEVELOPMENT ENGINEER- NON-METALLICS Caterpillar Peterlee, County Durham 1 day ago Cyber Security Consultant Sanderson Government and Defence Newcastle Upon Tyne (NE1) Great benefits. 3 weeks ago Internal Auditor Ernest Gordon Recruitment Durham (DH1), DH1 £45000 - £50000 per annum + Car, Training, Progression 1 week ago Senior Risk Manager Turner & townsend North East 2 weeks ago Risk Management - all levels Turner & townsend North East 2 weeks ago Senior Consultant - Strategic Real Estate Advisory (Defence) Turner & townsend North East 2 weeks ago Executive Search Consultant Rec 2 Rec Search Newcastle Upon Tyne (NE1) £45,000 per annum + commission + bonuses + remote 2 weeks ago Technical Policy & Compliance Manager Nextech Group Limited Middlesbrough (TS1), TS1 Permanent Contract; On-site Published: 2 days ago £30000 - £35000 per annum + Training - Hands on - Exposure Apply Save Technical Policy & Compliance Manager Nextech Group Limited Apply Job Title - Policy & Compliance Manager Department - Technical Reports to - Head of Technical Location - Middlesbrough Salary - £30,000 - £35,000 Contract - Permanent, full time The role - We are looking for someone to take ownership of our Policy & Compliance function and lead it. You'll sit in the Technical Department, alongside Service Desk, Networks, Projects and Infrastructure, reporting into the Head of Technical. The job blends hands-on technical credibility with compliance leadership. You'll hold our Cyber Essentials and GDPR positions internally, and build both into priced, revenue-generating service offerings for our client base, alongside penetration testing. You'll need to be comfortable standing by your decisions, confident in front of clients as well as colleagues, and happy to roll your sleeves up on technical work when the Desk needs a hand. What you'll own - Five areas of responsibility, each one yours to run rather than assist with. Cyber Essentials - Internal and client-facing Project manage Cyber Essentials and Cyber Essentials Plus certification, for us and for clients Own scoping, evidence gathering, remediation planning, submission and renewal cycles Build it into a structured, priced product offering GDPR and data protection - Including DPO services Own the GDPR roadmap: define milestones, close gaps, keep us compliant Apply ICO knowledge practically across registration, breach reporting, DSARs and records of processing activity Write customer data policies, IT acceptable use policies and IT business continuity plans Act as Data Protection Officer for clients who buy the service Compliance tooling - Within our Kaseya stack Own and administer Kaseya Compliance Manager, or an equivalent platform Use it to evidence and report on compliance posture, for us and for clients Penetration testing - A new commercial line Lead and coordinate pen testing engagements, internally and for clients Build it into a commercial offering alongside Cyber Essentials Policy and internal controls - The underlying discipline Apply change management when drafting and revising policy Create and maintain sound internal controls, and monitor adherence to them Audit policy, practices and documents proactively to find weaknesses before anyone else does Train and educate employees and clients, and field their compliance questions Service desk support - Occasional, not your day job Flex into Service Desk support when it's needed Keep enough technical grounding, and enough understanding of desk SLAs, to help efficiently without being a primary desk resource One thing to be clear about This is not a developmental role with extensive training and a long runway. We need someone who can pick it up and run with it from day one. That means you already have the technical grounding and the compliance exposure to take ownership quickly, and you're comfortable operating with minimal supervision. If that's you, you'll have a function to shape and real commercial ownership of it. What you'll need A strong technical background, ready to step up Demonstrable experience with Cyber Essentials and Cyber Essentials Plus certification Knowledge of GDPR, ICO compliance and general compliance controls such as the DPA Experience with Kaseya Compliance Manager or a similar GRC tool Pen testing exposure, whether scoping, coordinating or delivering Experience writing and implementing company policy, plus business continuity work The confidence to lead internal and customer meetings Project management skills, and the drive to take an initiative to completion on your own A commercial mindset that treats compliance and security as a product, not a cost centre Excellent communication, integrity, professional ethics and close attention to detail Nice to have MSP experience Time spent in a compliance environment, full or part time Health or education sector experience General cyber security experience Professional certification such as CCEP. We'll support the right candidate through certification Technical skills we'll expect Windows Server administration: AD, Group Policy, DNS and DHCP Microsoft 365 and Azure AD administration Networking fundamentals: VLANs, firewalls, routing and switching Backup and disaster recovery concepts RMM and PSA tooling, ideally the Kaseya stack Troubleshooting across desktop, server and network estates Apply Nextech Group Limited IT & Tech 50 Jobs Technical Policy & Compliance Manager jobs Technical Policy & Compliance Manager jobs in Middlesbrough Management jobs Management jobs in Middlesbrough Technical jobs Technical jobs in Middlesbrough Jobs in Middlesbrough Full Time jobs Weekend jobs Retail jobs Night Shift jobs Apprenticeship jobs NHS jobs HGV jobs Immediate Start jobs Warehouse jobs Cleaning jobs No Experience jobs Remote jobs Admin jobs Apprenticeships jobs Administration jobs Tesco jobs Get hired. Find success. Get started Totaljobs About us Careers at Totaljobs Press Partners Privacy policy Terms and conditions Cookies Legal and compliance Accessibility Jobseekers Salary Planner Jobseeker help centre Career advice Recruiters Post job ads Recruiting news Courses Contact us - recruiters Recruit internationally Download App store Play store The Stepstone Group UK Ltd © 2026 We use cookies We use cookies to operate our website, measure how people use our services to help us improve them, enrich usage profiles and personalise the content displayed to you. We also share information about your use of our site with our social media, advertising, and analytics partners, who may combine it with other information, to show you relevant ads on other websites, and to measure the performance of our advertising. Some cookies are essential for the operation of our website. If you would prefer us not to use the non-essential cookies, click “Just necessary”, but please be aware that this may impact your experience of our site and the services we are able to offer. Click “Accept” if you’re happy for us to place these cookies. You can change your mind at any time. Store and / or access information on a device Cookies, device identifiers, or other information can be stored or accessed on your device for the purposes presented to you. Personalised ads and content, ad and content measurement, audience insights and product development Ads and content can be personalised based on a profile. More data can be added to better personalise ads and content. The performance of ads and content can be measured. Insights about audiences who have viewed the ads and content can be extracted. Data can be used to build or improve user experience, systems and software. Display third-party content (social networks, videos) Content from social networks and embedded content from third-party providers can be displayed. Identifiers derived from authentications If an identifier is created based on authentication data, such as contact details associated with online accounts you have set up on websites or apps (e.g. email address, phone number) or customer identifiers (e.g. an identifier provided by your telecommunications provider), then this identifier can be used to recognize you across websites, apps and devices if you are logged in with the same contact details. Just Necessary Accept All Cookie Settings You can also exercise your right to object to data processing based on legitimate interests under “Privacy Policy”. Privacy Policy Cookie policy