Head of Information Security, Risk and Compliance

Reference: h58l7c5k1objqz0zfux8

We are seeking an experienced Head of Information Security, Risk and Compliance to lead the development and delivery of a robust security, risk and compliance programme. This is a senior leadership role responsible for protecting information assets, strengthening organisational resilience and ensuring that security practices support business objectives. You will establish a clear strategic roadmap, provide trusted advice to senior stakeholders and promote a culture in which security and responsible risk management are embedded across the organisation.

Your responsibilities will include owning information security governance, policies, standards and control frameworks; overseeing risk identification, assessment, treatment and reporting; and ensuring compliance with relevant legislation, regulatory requirements and industry standards. You will lead security assurance activities, internal and external audits, third-party risk management, vulnerability management and incident response preparedness. Working closely with technology, legal, privacy, procurement and operational teams, you will assess emerging threats, manage security improvement initiatives and provide clear reporting on risk exposure, control effectiveness and remediation progress. You will also support business continuity and disaster recovery planning, maintain effective escalation processes and ensure that security incidents are investigated, managed and learned from appropriately.

The successful candidate will bring substantial experience in information security, governance, risk and compliance, ideally gained in a complex or highly regulated environment. You will have strong knowledge of recognised security and risk frameworks, data protection principles, audit practices and regulatory expectations, together with experience leading teams, programmes and cross-functional change. Relevant professional qualifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, or equivalent experience, would be advantageous. A pragmatic, collaborative and commercially aware approach is essential, alongside the ability to communicate complex issues clearly to both technical and non-technical audiences, influence senior decision-makers and balance effective risk management with operational delivery.

£110,000.00
Per annum
Added 22/09/2026
Reference: h58l7c5k1objqz0zfux8

Head of Information Security, Risk and Compliance

Thame, England, United Kingdom Permanent IT Security Manager

Other similar jobs

Head of Security, Risk & Compliance (Global Remit)

Added 01/09/2026

We are seeking an experienced Head of Security, Risk & Compliance to lead the development and delivery of a global security, risk and compliance strategy. This is a senior leadership role with responsibility for protecting people, systems, data and operations across multiple regions, while enabling business growth and supporting a strong culture of accountability. You will advise executive stakeholders and the wider leadership team on security threats, regulatory obligations, risk exposure and appropriate investment priorities. You will own the information security, cyber risk, governance, compliance and business continuity frameworks, ensuring they remain effective, proportionate and aligned with organisational objectives. Key...

Learn more

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

Information Security and Compliance Risk Manager

Added 26/08/2026

We are seeking an Information Security and Compliance Risk Manager to lead the development, implementation and continual improvement of information security, compliance and enterprise risk management practices. This role will provide trusted advice to senior stakeholders, helping to identify, assess and manage technology, information and operational risks across the organisation. You will support a strong culture of security and accountability while ensuring that policies, controls and processes remain aligned with relevant legislation, regulatory expectations, industry standards and business objectives. Key responsibilities will include maintaining the information security and compliance risk framework; managing risk assessments, control reviews, assurance activities and remediation...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 18/08/2026

We are seeking a dedicated Information Security Governance, Risk, and Compliance (GRC) Specialist to join our team. In this role, you will be responsible for developing and maintaining the organization's information security policies and procedures, ensuring compliance with applicable regulations and standards. You will conduct risk assessments, identify vulnerabilities, and implement effective mitigation strategies to protect sensitive data. Collaborating with cross-functional teams, you will lead initiatives to enhance the organization’s overall security posture and ensure that all security measures align with business objectives. Your expertise will be crucial in conducting regular audits and assessments to evaluate the effectiveness of current...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Head of Operational Information Security, Risk and Assurance

Added 04/09/2026

We are seeking an experienced Head of Operational Information Security, Risk and Assurance to lead the development and delivery of a robust operational security, risk and assurance function. This is a senior leadership role with responsibility for protecting information assets, strengthening resilience and ensuring that security practices support organisational objectives. You will provide clear direction across information security operations, technology risk, governance, compliance and assurance, while promoting a culture of shared accountability for security. You will oversee the identification, assessment and treatment of information and technology risks, ensuring that effective controls are designed, implemented and continuously improved. Responsibilities will include...

Learn more

Head of Compliance and Data Privacy - 12 month FTC

Added 15/09/2026

We are seeking an experienced Head of Compliance and Data Privacy for a 12-month fixed-term contract. This is a senior role with responsibility for leading the compliance and data privacy agenda across the organisation, ensuring that appropriate frameworks, policies and controls are in place and operating effectively. You will provide pragmatic, commercially focused advice to senior stakeholders and support a strong culture of ethical conduct, accountability and regulatory awareness. Your responsibilities will include overseeing the compliance and data protection framework, monitoring changes in relevant laws and regulations, and assessing their impact on the business. You will maintain and update policies,...

Learn more

Delivery Consultant - Security, Risk, and Compliance, Professional Services

Added 18/08/2026

We are seeking a dedicated Delivery Consultant with expertise in Security, Risk, and Compliance within the realm of Professional Services. In this role, you will be responsible for leading client engagements, delivering tailored solutions, and ensuring that all security and compliance requirements are met. You will collaborate closely with clients to assess their current security posture, identify potential risks, and develop comprehensive strategies that align with regulatory standards and best practices. Your analytical skills will be vital in conducting detailed risk assessments, vulnerability analyses, and compliance audits. The ideal candidate will possess strong communication skills, allowing you to effectively present...

Learn more

Group AI Governance, Risk and Compliance Manager (DPO)

Added 15/10/2026

We are seeking an experienced Group AI Governance, Risk and Compliance Manager (DPO) to lead the development and implementation of a robust framework for the responsible, lawful and secure use of artificial intelligence across a complex, multi-jurisdictional organisation. This is a senior role requiring strong expertise in data protection, AI regulation, information governance and enterprise risk management, together with the ability to translate evolving requirements into practical business controls. You will establish and maintain AI governance policies, standards, procedures and assurance processes, ensuring that AI systems are appropriately assessed, documented, monitored and reviewed throughout their lifecycle. Key responsibilities will include...

Learn more

Cybersecurity Governance, Risk and Compliance

Added 06/10/2026

We are seeking an experienced Cybersecurity Governance, Risk and Compliance professional to strengthen the organisation’s information security framework and support the effective management of cyber risk. This role will help ensure that security policies, controls and processes align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to cybersecurity. Key responsibilities will include maintaining and improving cybersecurity governance frameworks, policies, standards and procedures; coordinating enterprise-wide risk assessments; tracking remediation activities; and preparing clear reports for senior leadership and relevant governance committees. You...

Learn more

Cybersecurity Risk and Compliance Associate

Added 22/09/2026

We are seeking a Cybersecurity Risk and Compliance Associate to support the ongoing development, implementation, and monitoring of information security risk and compliance activities. In this role, you will help assess cybersecurity risks, maintain accurate governance documentation, and support the organisation in meeting applicable regulatory, contractual, and internal security requirements. You will work closely with technology, privacy, legal, internal audit, and business teams to promote effective risk management and security-aware decision-making. Key responsibilities include coordinating risk assessments, documenting findings, tracking remediation plans, and monitoring the timely completion of corrective actions. You will assist with maintaining policies, standards, procedures, risk registers,...

Learn more

Information Security - Risk Analyst (Third Party Risk)

Added 29/09/2026

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle. Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps,...

Learn more

Information Security Governance and Compliance Analyst

Added 06/10/2026

We are seeking an Information Security Governance and Compliance Analyst to support the development, implementation, and continuous improvement of information security governance and compliance practices. This role will help ensure that policies, standards, procedures, and controls are aligned with business objectives, regulatory obligations, and recognised security frameworks. The successful candidate will work closely with technology, risk, legal, privacy, audit, and business stakeholders to promote a consistent and effective approach to information security. Key responsibilities include maintaining the information security policy and control framework; coordinating compliance assessments, internal reviews, and external audits; monitoring regulatory and industry developments; and supporting the remediation...

Learn more

Technology and Cybersecurity Assurance and Risk Manager

Added 15/10/2026

We are seeking an experienced Technology and Cybersecurity Assurance and Risk Manager to lead the development, coordination and continuous improvement of technology assurance, cybersecurity risk management and governance activities. You will provide independent oversight and constructive challenge across technology services, projects, suppliers and business change, helping to ensure that risks are identified, assessed, managed and reported effectively. Key responsibilities will include maintaining technology and cybersecurity risk frameworks, policies, standards and control requirements; conducting risk and control assessments; overseeing remediation plans; and preparing clear reports for senior stakeholders and relevant governance forums. You will support security assurance reviews, audit activity, regulatory...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.