IT Governance Lead

ICP is a global leader in Content Operations, partnering with some of the world's most recognizable brands, including Unilever, Diageo, Coca-Cola, Mars, P&G, Starbucks, Coty, L’Oréal, NBCU, and Aetna. Our expertise spans content management, logistics, creative operations, production, and digital commerce enablement, ensuring a seamless flow of content across all systems and channels. We empower brands to achieve operational excellence and confidently manage their content.

With offices in Atlanta, London, Mexico City, Mumbai, and Shanghai, we operate on a global scale, delivering world-class solutions that drive exceptional business outcomes.

At ICP, our values define us: we are Curious, Focused, Creative, Trustworthy, and Inclusive.

We provide benefits that matter to our people and enable us to be engaged both in and outside of work. We foster a culture where work/life balance is nurtured and encouraged, offering hybrid working, generous paid time off, paid holidays, volunteer time off, and Summer half-day Fridays. We also take care of our people with competitive medical, dental, and vision benefits, mental health support, and a robust savings plan.

The IT Operations & Technical Governance Lead ensures ICP’s IT environment remains secure, well-governed, documented, auditable, and operationally resilient. The role focuses on IT governance, ISO 27001 maintenance, Microsoft 365 and Azure governance, risk management, documentation, compliance, and project-to-BAU transitions.

Purpose of the role:

• Maintain effective IT governance, operational continuity and control evidence.
• Support ISO 27001 post-certification activity, surveillance readiness and continual improvement.
• Keep technical documentation, runbooks, architecture records and ownership models current.
• Coordinate IT risk tracking, change control, Microsoft Purview activity and secure data collection.
• Ensure new projects transition cleanly into business-as-usual support with clear ownership.

Key Responsibilities:

• IT Operations & Governance: Own and enhance IT governance processes, ensuring clear service ownership, support models, escalation pathways, and operational reporting across the technology estate.
• Technical Documentation & Knowledge Management: Maintain and continuously improve technical documentation, including architecture diagrams, runbooks, SOPs, design records, and project handover materials, ensuring operational resilience and knowledge retention.
• ISO 27001 & Compliance: Support the ongoing management of the Information Security Management System (ISMS), coordinating evidence collection, control ownership, audit readiness, surveillance activities, and continual improvement initiatives.
• Microsoft Purview & Data Governance: Coordinate Microsoft Purview and eDiscovery activities, supporting Subject Access Requests (SARs), evidence collection, audit trails, and the secure handling of sensitive information.
• Microsoft 365, Azure & Security Governance: Monitor and report on security and compliance metrics across Microsoft 365 and Azure, including Secure Score, Exposure Score, Defender recommendations, vulnerability management, and remediation progress.
• Ensure high-risk technology changes are appropriately documented, risk assessed, approved, and supported by auditable evidence, maintaining strong governance and regulatory compliance.
• Maintain technology risk registers, supplier assurance records, penetration testing results, and incident follow-up actions, driving remediation and reducing organisational risk exposure.
• Project Transition & Operational Readiness: Ensure new technologies and projects transition seamlessly into Business-as-Usual support, with clear ownership, support processes, documentation, and operational accountability in place.

Essential skills and experience:

• Experience in IT operations, technical governance, service management or technology leadership.
• Good working knowledge of Microsoft 365, Azure, Entra ID, Intune, Defender and Purview.
• Experience with ISO 27001, audit evidence, IT risk management, compliance and change control.
• Strong documentation, stakeholder management and business communication skills.
• Ability to translate technical risk and control requirements into clear business language.

Key attributes:

• Structured, documentation-focused, security-conscious, risk-aware, commercially pragmatic, calm under pressure, accountable and comfortable working with senior stakeholders.

Success measures:

• IT services and control processes are clearly documented, owned and resilient.
• ISO 27001 evidence remains current and surveillance-ready.
• Risks, vulnerabilities, recommendations and remediation actions are tracked and visible.
• Purview/SAR activity is repeatable, secure and auditable.
• Leadership has clear visibility of IT risk, operational maturity and open actions.

Someone who exemplifies our ICP Values: Curious, Inclusive, Focused, Creative, Trustworthy.