Assistant Manager - Information Security Risk and Governance

Reference: t99xu7tjokjgtkqdu2vg

We are seeking an Assistant Manager – Information Security Risk and Governance to support the development, implementation and continuous improvement of information security risk management and governance practices. This role will help ensure that security risks are identified, assessed, monitored and reported effectively, while supporting compliance with relevant laws, regulations, policies and industry standards. The successful candidate will work with stakeholders across the organisation to promote a strong culture of information security and informed risk-based decision-making.

Key responsibilities will include coordinating information security risk assessments, maintaining risk registers and tracking remediation plans through to completion. You will support the review and enhancement of security policies, standards, procedures and control frameworks, as well as assist with governance forums, management reporting and risk escalation. The role will also contribute to third-party and supplier security assessments, control testing, audit activity, regulatory reviews and the monitoring of key risk indicators. You may be required to support the investigation and reporting of security incidents, policy exceptions and control weaknesses, ensuring appropriate actions are documented and followed up.

Applicants should have experience in information security, technology risk, IT governance, compliance or a related discipline, ideally within a regulated or complex environment. A relevant degree or professional qualification, such as CISA, CRISC, CISSP, CISM or ISO 27001 certification, would be advantageous. You will need a sound understanding of information security principles, risk management methodologies, governance frameworks and common standards such as ISO 27001, NIST or COBIT. Strong analytical, organisational and communication skills are essential, together with the ability to explain technical and risk matters clearly to both technical and non-technical audiences. We are looking for a proactive and collaborative professional who can manage multiple priorities, challenge constructively and contribute to practical improvements in security resilience.

COMPETITIVE SALARY
Added 13/10/2026
Reference: t99xu7tjokjgtkqdu2vg

Assistant Manager - Information Security Risk and Governance

London, England, United Kingdom Permanent Governance and Compliance

Other similar jobs

Digital, Cyber Governance Assistant Manager

Added 04/09/2026

We are seeking a Digital, Cyber Governance Assistant Manager to support the development, implementation and continuous improvement of governance frameworks across digital services, information security and cyber risk. Working with stakeholders across technology, risk, compliance and business operations, you will help ensure that digital and cyber activities are managed consistently, transparently and in line with relevant policies, regulatory expectations and industry standards. Your responsibilities will include maintaining governance policies, standards, procedures and control documentation; coordinating governance forums, agendas, minutes and action tracking; and preparing clear reports, dashboards and management information on cyber risk, compliance, incidents, controls and remediation progress. You...

Learn more

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 18/08/2026

We are seeking a dedicated Information Security Governance, Risk, and Compliance (GRC) Specialist to join our team. In this role, you will be responsible for developing and maintaining the organization's information security policies and procedures, ensuring compliance with applicable regulations and standards. You will conduct risk assessments, identify vulnerabilities, and implement effective mitigation strategies to protect sensitive data. Collaborating with cross-functional teams, you will lead initiatives to enhance the organization’s overall security posture and ensure that all security measures align with business objectives. Your expertise will be crucial in conducting regular audits and assessments to evaluate the effectiveness of current...

Learn more

Group AI Governance, Risk and Compliance Manager (DPO)

Added 15/10/2026

We are seeking an experienced Group AI Governance, Risk and Compliance Manager (DPO) to lead the development and implementation of a robust framework for the responsible, lawful and secure use of artificial intelligence across a complex, multi-jurisdictional organisation. This is a senior role requiring strong expertise in data protection, AI regulation, information governance and enterprise risk management, together with the ability to translate evolving requirements into practical business controls. You will establish and maintain AI governance policies, standards, procedures and assurance processes, ensuring that AI systems are appropriately assessed, documented, monitored and reviewed throughout their lifecycle. Key responsibilities will include...

Learn more

Cyber Response and Recovery - Assistant Manager (Proactive)

Added 26/08/2026

We are seeking a Cyber Response and Recovery – Assistant Manager (Proactive) to strengthen organisational resilience against cyber threats. This role will focus on preparing for, preventing and reducing the impact of cyber incidents through effective planning, testing and continuous improvement. You will work closely with cybersecurity, technology, risk, compliance, business continuity and operational teams to ensure the organisation is ready to respond to disruption and recover critical services safely and efficiently. Key responsibilities will include developing and maintaining cyber incident response, recovery and crisis management plans; coordinating tabletop exercises, simulations and technical recovery tests; documenting lessons learned and tracking...

Learn more

Assistant Manager, Global Cybersecurity Policies and Standards

Added 25/08/2026

We are seeking an Assistant Manager, Global Cybersecurity Policies and Standards to support the development, maintenance and implementation of a global cybersecurity governance framework. This role will help ensure that policies, standards and related controls remain aligned with business objectives, regulatory obligations, recognised security frameworks and evolving industry threats. You will work with stakeholders across technology, risk, legal, compliance, privacy and business functions to promote consistent cybersecurity practices across multiple regions and operating environments. Key responsibilities will include reviewing and updating cybersecurity policies, standards, procedures and guidance; coordinating consultation, approval and publication activities; translating regulatory and security requirements into practical...

Learn more

Assistant Manager - Cyber and Digital Health

Added 25/08/2026

We are seeking an Assistant Manager – Cyber and Digital Health to support the delivery of secure, effective and innovative digital services across a complex health environment. This role will contribute to the development and implementation of cyber security, information governance and digital health initiatives, helping to protect sensitive information while enabling high-quality care and efficient service delivery. You will assist with cyber risk assessments, security assurance activities, incident response, vulnerability management and compliance monitoring. Working with clinical, operational, technical and external stakeholders, you will help translate security requirements into practical controls and support the delivery of projects involving digital...

Learn more

Cyber Response and Recovery - Assistant Manager (Reactive)

Added 18/08/2026

We are seeking an enthusiastic and skilled Cyber Response and Recovery - Assistant Manager (Reactive) to join our dynamic team. In this role, you will be responsible for leading incident response efforts during cyber incidents, ensuring that all incidents are efficiently managed and that recovery processes are executed effectively. You will collaborate with cross-functional teams to analyze and respond to cyber threats, while also developing and implementing incident response plans that align with industry best practices. Your proactive approach will help minimize impact and restore services swiftly during security breaches. The ideal candidate will possess strong analytical and problem-solving skills,...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Assistant Manager Information Security

Added 05/10/2026

We are seeking an Assistant Manager, Information Security to support the development, implementation and ongoing improvement of information security practices across the organisation. The role will help protect information assets, systems and services by contributing to security governance, risk management, compliance and operational assurance. You will work closely with technology, business and third-party stakeholders to promote effective security controls and strengthen the organisation’s overall resilience. Key responsibilities include assisting with information security policies, standards and procedures; coordinating risk assessments and control reviews; monitoring compliance with applicable legal, regulatory and industry requirements; and supporting the identification, investigation and resolution of security...

Learn more

Assistant Manager, Analyst - Business Information Security (BIS), Global

Added 03/09/2026

We are seeking an Assistant Manager, Analyst to support the Business Information Security (BIS) function across global operations. This role will help protect business information, technology assets and services by contributing to security governance, risk management and operational assurance activities. You will work with stakeholders across technology, business operations, internal controls and risk teams to promote secure practices and support the delivery of information security objectives. Key responsibilities include assisting with the assessment, documentation and monitoring of information security risks; coordinating the review of security controls, policies and procedures; and supporting the tracking and remediation of identified issues. You will...

Learn more

Assistant Manager, Analyst - Business Information Security (BIS), Global

Added 03/09/2026

We are seeking an Assistant Manager, Analyst to support the Business Information Security (BIS) function across a global organisation. This role will help protect business information, technology services and digital assets by supporting security governance, risk management and operational assurance activities. You will work with stakeholders across multiple regions and functions, helping to identify information security risks and promote consistent, practical controls. Key responsibilities include assisting with information security risk assessments, control reviews, policy and standards implementation, issue tracking and remediation monitoring. You will analyse security findings, prepare clear reports and management information, and support the coordination of audits, assessments...

Learn more

Cybersecurity Governance, Risk and Compliance

Added 06/10/2026

We are seeking an experienced Cybersecurity Governance, Risk and Compliance professional to strengthen the organisation’s information security framework and support the effective management of cyber risk. This role will help ensure that security policies, controls and processes align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to cybersecurity. Key responsibilities will include maintaining and improving cybersecurity governance frameworks, policies, standards and procedures; coordinating enterprise-wide risk assessments; tracking remediation activities; and preparing clear reports for senior leadership and relevant governance committees. You...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead the development and continuous improvement of information security governance, risk management and compliance practices. This role will help strengthen organisational resilience, protect sensitive information and ensure that security activities align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to security. Key responsibilities will include maintaining security policies, standards, procedures and control frameworks; managing information security and technology risk assessments; overseeing risk registers, treatment plans and exception processes; and...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.