Information Security Governance, Risk and Compliance Lead
We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved.
Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating internal and external audits, regulatory reviews and compliance assessments; and preparing clear reports, metrics and recommendations for senior stakeholders. You will manage the governance calendar, maintain risk and compliance registers, monitor remediation activities and provide assurance that security controls are operating effectively. The role will also contribute to third-party risk management, security due diligence, incident governance, business continuity and privacy-related initiatives. You will be expected to interpret evolving legislation, regulations and industry standards, translating requirements into practical guidance and proportionate controls.
The successful candidate will have substantial experience in information security governance, risk and compliance, with a strong understanding of recognised frameworks and standards such as ISO 27001, NIST, COBIT or equivalent. Professional certifications in information security, audit, risk or compliance are desirable. You will bring excellent analytical, communication and stakeholder-management skills, together with the ability to influence at all levels and explain complex issues clearly to both technical and non-technical audiences. A pragmatic, organised and collaborative approach is essential, as is experience managing multiple priorities, driving remediation and embedding sustainable improvements. This is an opportunity to play a key role in shaping security strategy, strengthening organisational resilience and ensuring confidence in the protection and use of information.
Information Security Governance, Risk and Compliance Lead
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer