Head of Information Security, Risk and Compliance
We are seeking an experienced Head of Information Security, Risk and Compliance to lead the development and delivery of a robust security, risk and compliance programme. This is a senior leadership role responsible for protecting information assets, strengthening organisational resilience and ensuring that security practices support business objectives. You will establish a clear strategic roadmap, provide trusted advice to senior stakeholders and promote a culture in which security and responsible risk management are embedded across the organisation.
Your responsibilities will include owning information security governance, policies, standards and control frameworks; overseeing risk identification, assessment, treatment and reporting; and ensuring compliance with relevant legislation, regulatory requirements and industry standards. You will lead security assurance activities, internal and external audits, third-party risk management, vulnerability management and incident response preparedness. Working closely with technology, legal, privacy, procurement and operational teams, you will assess emerging threats, manage security improvement initiatives and provide clear reporting on risk exposure, control effectiveness and remediation progress. You will also support business continuity and disaster recovery planning, maintain effective escalation processes and ensure that security incidents are investigated, managed and learned from appropriately.
The successful candidate will bring substantial experience in information security, governance, risk and compliance, ideally gained in a complex or highly regulated environment. You will have strong knowledge of recognised security and risk frameworks, data protection principles, audit practices and regulatory expectations, together with experience leading teams, programmes and cross-functional change. Relevant professional qualifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, or equivalent experience, would be advantageous. A pragmatic, collaborative and commercially aware approach is essential, alongside the ability to communicate complex issues clearly to both technical and non-technical audiences, influence senior decision-makers and balance effective risk management with operational delivery.
Head of Information Security, Risk and Compliance
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer