Google Governance Manager

GCP Governance and Compliance Manager
12 months
London or Manchester - x2 days onsite 3 days remote
Inside IR35 - Umbrella only

Overview:
Out client is delivering non-production and production Google Cloud Platform (GCP) Landing Zones, including an Internet Facing Environment (IFE) to host external APIs. To ensure the platform meets The Banks' core security requirements, is onboarded on the BAU Group Cloud Governance process and complies with the Cloud Controls Framework (CCF), a dedicated GCP Governance and Compliance Manager is required. This role will focus on mapping The Banks' policies and standards to the GCP Landing Zone delivery, ensuring all technical and operational controls are established, evidenced, auditable, and compliant with regulatory and internal requirements.

Role Purpose:
The GCP Governance and Compliance Manager will act as the primary governance lead for the GCP Landing Zone programme, ensuring all platform components, controls, and processes are established and aligned with The Banks' policies, standards, and Cloud Controls Framework. The role will bridge engineering delivery and group governance process, leading on the compliance, audit readiness, and regulatory engagement throughout the programme lifecycle.

Key Responsibilities:

Lead the mapping of The Banks' internal policies, standards, and regulatory requirements to the GCP Landing Zone architecture and delivery artefacts.
Maintain traceability between Bank's Cloud Controls Framework, Policies & Standards and technical implementation, ensuring all controls are established, evidenced and auditable.
Ensure automated compliance validation, drift detection, and continuous monitoring are in place and effective.
Liaise with Controls Assurance and Testing teams to support controls attestation, testing, and remediation activities.
Serve as the governance lead for the GCP Landing Zone programme, representing the Group Cloud Governance interests in all relevant forums and working groups.
Prepare and present evidence for key governance approvals (e.g., ARB, GTC, CAF, CSO engagements, etc.) at each delivery milestone and ensure this is clearly documented to support the Bank's standard governance engagement model.
Lead on the regulatory engagement (e.g., PRA/FCA, etc) with the aim to gather the appropriate approvals and authorisation to utilise the GCP platform, by collating and providing required documentation and artefacts, drive necessary communication and reporting.
Onboard the GCP platform on the Group Cloud Governance process, identifying potential gaps, action remediations and transition to the BAU cloud governance team.
Ensure all governance, controls, and compliance documentation is complete, accurate, and ready for internal and external audit.
Maintain up-to-date runbooks, operational readiness playbooks, and user guides for governance-related processes.
Track and report on risk management, gap remediation, and controls mapping status.
Identify opportunities to enhance governance processes, controls, and reporting in line with The Banks' evolving cloud strategy.
Contribute to the development and periodic enhancement of the Cloud Controls Framework and related governance artefacts where required
Essential

Demonstrable and successful experience in engaging with appropriate financial services regulators to approve a cloud Landing Zone platform, ideally on GCP.
Demonstrable knowledge of applicable regulatory frameworks and industry standards, and proven experience of mapping these to internal policies, standards and controls.
Deep Experience with controls assurance, compliance validation, and audit processes.
Excellent understanding of the GCP technical services (Active GCP Certifications; ideally GCP Certified Professional Cloud Architect), for the purpose of validating the establishing of required technical and non-technical controls, engaging with the engineering team and ensuring the governance and provisioning of GCP accounts are onboarded on the Group Governance process.
Excellent understanding of the GCP Cloud Adoption Framework
Proven experience in cloud governance, risk, and compliance within a regulated financial services environment.
Deep understanding of GCP architecture, landing zone design, and cloud security controls.
Ability to work independently and collaboratively across engineering, security, risk, and governance teams.
All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply