Director of Cyber Risk & Governance

Reference: c4dc9282d8xnarjpn9sn

We are seeking an experienced Director of Cyber Risk & Governance to lead the development and delivery of an enterprise-wide cyber risk and governance framework. This senior leadership role will provide strategic direction on cybersecurity risk management, regulatory compliance, policy, control assurance and security governance across a complex organisation. You will work closely with executive stakeholders, technology leaders, risk teams and business functions to strengthen cyber resilience and ensure that security risks are understood, managed and reported effectively.

Key responsibilities will include setting the cyber risk and governance strategy; maintaining policies, standards and control frameworks; overseeing risk identification, assessment, treatment and acceptance; and establishing clear reporting for senior leadership and relevant governance committees. You will lead the ongoing assessment of security controls, third-party and supply-chain risks, regulatory obligations and emerging threats. The role will also oversee governance processes relating to security architecture, vulnerability management, incident readiness, data protection and business continuity, ensuring that assurance activities are coordinated and translated into measurable improvements.

The successful candidate will bring substantial experience in cyber risk, information security governance, technology risk or a related discipline, gained in a large or highly regulated environment. You will have a strong understanding of recognised security and risk frameworks, regulatory expectations, audit practices and control assurance methodologies, together with the ability to translate complex technical matters into clear business language. Strong influencing, stakeholder management and communication skills are essential, as is experience leading high-performing teams and delivering change across multiple functions. Relevant professional qualifications such as CISSP, CISM, CRISC, CGEIT or equivalent are desirable. This is an opportunity to shape a mature, risk-informed security culture and make a meaningful contribution to organisational resilience.

£120,000.00 - £135,000.00
Per annum
Added 08/10/2026
Reference: c4dc9282d8xnarjpn9sn

Other similar jobs

Associate Director, Identity Governance and Administration (Manchester)

Added 08/10/2026

We are seeking an experienced Associate Director, Identity Governance and Administration to lead the development and delivery of a mature, risk-based identity governance capability in Manchester. This senior role will provide strategic direction across identity lifecycle management, access governance, privileged access oversight, role-based access control and segregation of duties. You will work closely with technology, information security, risk, compliance and business stakeholders to ensure that access to systems and data is appropriate, auditable and aligned with organisational policies. You will define and maintain the identity governance roadmap, establish effective operating models and drive continuous improvement across joiner, mover and leaver...

Learn more

Head of Security Governance - Director

Added 08/10/2026

We are seeking an experienced Head of Security Governance to provide strategic leadership across the organisation’s information and cyber security governance framework. This Director-level role will shape security strategy, policies, standards and assurance activities, ensuring that security risks are identified, managed and reported effectively across a complex operating environment. The successful candidate will act as a trusted adviser to senior leadership and key stakeholders, translating regulatory, technological and business requirements into practical security outcomes. Responsibilities will include owning and evolving the security governance model; establishing clear accountability, control frameworks and risk appetite; and overseeing policies, procedures, standards and governance forums....

Learn more

Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer

Added 17/09/2026

We are seeking a Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer to strengthen enterprise-wide security governance and support the continuous improvement of cyber risk management practices. This role will provide expert guidance across security frameworks, policies, controls and assurance activities, helping to ensure that technology, business processes and third-party services meet regulatory, contractual and organisational requirements. Key responsibilities include developing, maintaining and reviewing information security policies, standards and procedures; conducting risk assessments and control reviews; supporting audit and compliance programmes; and tracking remediation activities through to completion. You will coordinate evidence gathering, prepare clear reports for senior stakeholders,...

Learn more

Cyber Security Governance & Risk Management Principal

Added 01/09/2026

We are seeking an experienced Cyber Security Governance & Risk Management Principal to lead the development, implementation and continual improvement of enterprise-wide cyber security governance and risk management practices. This senior role will provide strategic direction on security policies, standards, frameworks and controls, ensuring they support business objectives, regulatory obligations and evolving threat landscapes. You will act as a trusted adviser to senior stakeholders, translating complex cyber security risks into clear business impacts, priorities and practical remediation plans. Key responsibilities include maintaining the cyber security governance framework; overseeing risk identification, assessment, treatment and acceptance processes; and reporting risk exposure, control...

Learn more

Senior IT Cyber Governance, Risk & Compliance Analyst

Added 18/08/2026

We are seeking a highly skilled Senior IT Cyber Governance, Risk & Compliance Analyst to join our dynamic team. In this role, you will be responsible for developing, implementing, and maintaining an effective governance, risk management, and compliance framework to ensure the organization meets all regulatory requirements and industry standards. You will conduct thorough risk assessments, identify vulnerabilities, and recommend appropriate mitigation strategies. Additionally, you will collaborate with cross-functional teams to enhance cybersecurity policies and procedures, ensuring alignment with overall business objectives. The ideal candidate will have a strong background in IT security, risk management, and compliance, with a proven...

Learn more

Group AI Governance, Risk and Compliance Manager (DPO)

Added 15/10/2026

We are seeking an experienced Group AI Governance, Risk and Compliance Manager (DPO) to lead the development and implementation of a robust framework for the responsible, lawful and secure use of artificial intelligence across a complex, multi-jurisdictional organisation. This is a senior role requiring strong expertise in data protection, AI regulation, information governance and enterprise risk management, together with the ability to translate evolving requirements into practical business controls. You will establish and maintain AI governance policies, standards, procedures and assurance processes, ensuring that AI systems are appropriately assessed, documented, monitored and reviewed throughout their lifecycle. Key responsibilities will include...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead the development, implementation and continuous improvement of information security governance and risk management practices. This role will help strengthen organisational resilience, support regulatory compliance and ensure that security controls are aligned with business objectives. You will work closely with technology, legal, privacy, audit, procurement and operational teams to embed effective security practices across the organisation. Key responsibilities include maintaining and improving security policies, standards, procedures and control frameworks; managing enterprise security risk assessments and treatment plans; coordinating internal and external audits; monitoring compliance with relevant legislation, regulations...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking a Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance activities. This is a key role responsible for ensuring that security policies, controls and processes are aligned with business objectives, regulatory requirements and recognised industry standards. You will work closely with technology, legal, privacy, audit, operational and senior leadership teams to promote a strong, practical and risk-aware security culture. Your responsibilities will include developing, maintaining and communicating security policies, standards and procedures; managing the information security risk register; coordinating risk assessments and control reviews; and monitoring the...

Learn more

Assistant Manager - Information Security Risk and Governance

Added 13/10/2026

We are seeking an Assistant Manager – Information Security Risk and Governance to support the development, implementation and continuous improvement of information security risk management and governance practices. This role will help ensure that security risks are identified, assessed, monitored and reported effectively, while supporting compliance with relevant laws, regulations, policies and industry standards. The successful candidate will work with stakeholders across the organisation to promote a strong culture of information security and informed risk-based decision-making. Key responsibilities will include coordinating information security risk assessments, maintaining risk registers and tracking remediation plans through to completion. You will support the review...

Learn more

Governance, Risk & Compliance (GRC) Infosec Manager (PCI)

Added 13/10/2026

We are seeking an experienced Governance, Risk & Compliance (GRC) Infosec Manager with strong expertise in Payment Card Industry Data Security Standard (PCI DSS) compliance. This role will lead the development, implementation and continuous improvement of information security governance, risk management and compliance activities across a complex technology and business environment. You will act as a trusted adviser to senior stakeholders, helping to embed effective security practices while ensuring regulatory, contractual and industry requirements are consistently met. Key responsibilities will include owning the PCI DSS compliance programme, coordinating assessments and audits, maintaining policies, standards and control frameworks, and monitoring remediation...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead the development and continuous improvement of information security governance, risk management and compliance practices. This role will help strengthen organisational resilience, protect sensitive information and ensure that security activities align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to security. Key responsibilities will include maintaining security policies, standards, procedures and control frameworks; managing information security and technology risk assessments; overseeing risk registers, treatment plans and exception processes; and...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance programmes. This role will provide strategic direction while working closely with technology, legal, privacy, internal audit and business teams to ensure security controls support operational objectives and regulatory obligations. You will help promote a strong culture of security, accountability and continuous improvement across the organisation. Key responsibilities will include developing and maintaining security policies, standards, procedures and control frameworks; managing information security and technology risk assessments; maintaining risk registers and overseeing mitigation plans; and coordinating internal...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance programmes. This role will help ensure that security practices support business objectives while meeting regulatory, contractual and industry requirements. You will work closely with technology, legal, privacy, internal audit and operational teams to establish effective controls, promote security awareness and provide clear, practical advice on managing information and cyber risk. Key responsibilities will include maintaining and improving security policies, standards, procedures and control frameworks; coordinating enterprise security risk assessments; managing risk registers, treatment plans and exception...

Learn more

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Head of Digital Security, Risk & Governance

Added 06/10/2026

We are seeking an experienced Head of Digital Security, Risk & Governance to lead the development and delivery of a robust digital security and governance framework. This senior role will be responsible for protecting information, technology platforms, and digital services while enabling innovation and supporting strategic business objectives. You will establish clear security priorities, provide authoritative advice to senior stakeholders, and ensure that risks are identified, assessed, managed, and reported effectively. Key responsibilities will include developing and maintaining digital security, risk, and governance strategies; overseeing information security policies, standards, controls, and assurance activities; and leading security risk assessments across technology,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.