Chanel Senior Manager, Information Security Governance, Risk & Compliance

Closed The candidacy window for this position at Chanel has closed.

While this position is no longer receiving submissions as of April 22, 2026, we invite you to explore further opportunities at Chanel or browse all open roles.

Continue Your Search

We invite you to review more currently available roles:

Location
UK
└England
└London
Seniority
Manager
Department
IT & Technology Systems
Industry
Fashion, Apparel & Leather Goods
Posted
Apr 14, 2026

About Chanel

Chanel is an independent French maison renowned for haute couture, luxury ready-to-wear, leather goods and beauty. Globally recognised for craftsmanship, aesthetic leadership and brand stewardship, Chanel operates a complex international organisation combining heritage ateliers, global retail, and digital platforms. As an employer, it demands both creative excellence and rigorous professional standards across corporate functions including information security and technology.

Chanel — Senior Manager, Information Security Governance, Risk & Compliance in London. Lead GRC strategy, audits and risk programmes across global IT and business functions.

Role & Responsibilities

  • Define, advance and operate the information security governance, risk and compliance (GRC) programme across global IT and business functions.
  • Develop, maintain and socialise security policies, standards and control frameworks in alignment with ISO 27001, NIST and regulatory requirements (including GDPR and PCI-DSS where applicable).
  • Lead enterprise risk assessments and control self-assessments; translate findings into remediation roadmaps and executive reporting.
  • Coordinate internal and external compliance audits, certification efforts and third-party security assessments; manage remediation and evidence requests.
  • Oversee third‑party / vendor risk management processes, including due diligence, contract clauses and ongoing monitoring.
  • Produce and present concise governance reporting and key risk indicators to senior stakeholders and governance forums.
  • Collaborate with IT, legal, privacy, retail and business teams to embed security controls and drive continuous improvement.
  • Mentor and line-manage GRC practitioners; define priorities, processes and metrics for the team.

Qualifications

  • Relevant professional certification such as CISSP, CISM, CISA or CRISC strongly preferred.
  • Demonstrable knowledge of ISO 27001, NIST CSF, GDPR and common industry standards (PCI-DSS, SOC 2).
  • Proven ability to manage cross-functional stakeholders and influence at senior levels.
  • Experience managing audit and certification programmes and third-party risk assessments.
  • Strong written and verbal communication skills with experience producing executive-level reports.

Skills

Information security governance Risk assessment and remediation Compliance frameworks: ISO 27001, NIST CSF, GDPR, PCI-DSS, SOC 2 Third‑party/vendor risk management Policy and standards development Audit coordination and evidence management GRC platforms (e.g., RSA Archer, ServiceNow GRC, OneTrust) — familiarity preferred Identity & Access Management concepts (Okta, SailPoint) and cloud security (AWS, Azure, GCP) Security monitoring and vulnerability management tools (Splunk, Tenable) — advantageous Stakeholder engagement and executive reporting

Experience

Eight or more years in information security, with a minimum of three to five years leading GRC, compliance or risk programmes in a multinational environment; experience in luxury retail, consumer products or retail technology is advantageous.

Education

Bachelor's degree in Computer Science, Information Security, Engineering, Cybersecurity or a related discipline; Master's degree or equivalent professional experience preferred.

Workplace

The successful candidate will be located in London, England, UK.

Culture

Chanel combines deep respect for artisanal tradition with strategic investment in digital and corporate functions. The workplace culture prizes discretion, excellence and cross-disciplinary collaboration, with an expectation of high professional standards and a global, multilingual outlook.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.

Frequently Asked Questions

A.

The luxury industry is characterised by a diverse and nuanced nomenclature. Esteemed houses frequently employ proprietary terminology, and even within a single organisation like Chanel, titles may vary across global markets to reflect local conventions. To ensure absolute clarity, Cerulean assigns a standardised, industry-coherent canonical title to every listing. However, it is worth noting that this role is functionally synonymous with «Information Security GRC Manager», «Governance, Risk & Compliance Lead — Cybersecurity», «Senior Manager, Security Governance & Compliance», «GRC Manager, Information Security», and other variations. Our sophisticated search architecture anticipates these variations, ensuring that inquiries using related terms will seamlessly yield the exact roles you desire.