UK Head of IT Risk & Compliance

Reference: f2l14r6adwdox425c0yt

An exciting opportunity has arisen for a UK Head of IT Risk & Compliance to lead the development and delivery of a robust technology risk and compliance framework across a complex, multi-site environment. This senior role will provide strategic direction, challenge and assurance, ensuring that information technology risks are identified, managed and reported effectively.

You will own the IT risk management lifecycle, including risk identification, assessment, treatment, monitoring and reporting. Working closely with technology, information security, internal audit, legal and business stakeholders, you will ensure that appropriate controls are designed, implemented and maintained. You will also oversee compliance with relevant legislation, regulatory expectations, industry standards and internal policies.

Key responsibilities will include maintaining the IT risk and control framework; leading control testing and assurance activity; coordinating responses to internal and external audits; tracking remediation plans; and producing clear, insightful reports for senior leadership and governance committees. You will support the management of technology-related incidents, third-party risks, resilience assessments and regulatory submissions, while promoting a strong culture of accountability and continuous improvement.

The successful candidate will be an experienced IT risk, governance or compliance professional with a strong understanding of technology controls, cyber security, operational resilience and audit principles. You will have experience operating at a senior level within a regulated, complex or highly controlled environment, together with a track record of influencing stakeholders and translating technical risks into clear business-focused recommendations.

Relevant qualifications such as CISA, CRISC, CISM, CISSP, ISO 27001 or equivalent experience would be advantageous. You will combine excellent communication and presentation skills with sound judgement, strong analytical capability and the confidence to challenge constructively. The ability to manage competing priorities, lead through influence and deliver practical, proportionate solutions will be essential.

This is an opportunity to shape the technology risk and compliance agenda, strengthen organisational resilience and make a visible contribution to effective governance at a senior level.

COMPETITIVE SALARY
Added 30/10/2026
Reference: f2l14r6adwdox425c0yt

Other similar jobs

UK Head of IT Risk and Compliance

Added 02/11/2026

An exciting opportunity has arisen for a UK Head of IT Risk and Compliance to lead the development and delivery of a robust technology risk and compliance framework. This senior role will provide strategic direction, assurance and constructive challenge across information technology, cyber security, data protection and operational resilience. You will be responsible for maintaining an effective IT risk management programme, ensuring that risks are identified, assessed, recorded and treated consistently. Working closely with technology and business leaders, you will oversee risk appetite, control effectiveness, remediation plans and management reporting, providing clear insight to senior stakeholders and relevant governance forums....

Learn more

Head of Information Security, Risk and Compliance

Added 22/09/2026

We are seeking an experienced Head of Information Security, Risk and Compliance to lead the development and delivery of a robust security, risk and compliance programme. This is a senior leadership role responsible for protecting information assets, strengthening organisational resilience and ensuring that security practices support business objectives. You will establish a clear strategic roadmap, provide trusted advice to senior stakeholders and promote a culture in which security and responsible risk management are embedded across the organisation. Your responsibilities will include owning information security governance, policies, standards and control frameworks; overseeing risk identification, assessment, treatment and reporting; and ensuring compliance...

Learn more

Head of Compliance and Data Privacy - 12 month FTC

Added 15/09/2026

We are seeking an experienced Head of Compliance and Data Privacy for a 12-month fixed-term contract. This is a senior role with responsibility for leading the compliance and data privacy agenda across the organisation, ensuring that appropriate frameworks, policies and controls are in place and operating effectively. You will provide pragmatic, commercially focused advice to senior stakeholders and support a strong culture of ethical conduct, accountability and regulatory awareness. Your responsibilities will include overseeing the compliance and data protection framework, monitoring changes in relevant laws and regulations, and assessing their impact on the business. You will maintain and update policies,...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with cybersecurity strategy, governance, risk and compliance. You will help organisations understand their cyber risk, strengthen their security posture and develop practical, sustainable approaches to managing technology and information security. Working as part of a collaborative consulting team, you will engage with senior stakeholders, translate business objectives into security priorities and provide clear, commercially focused advice. Your responsibilities will include leading and contributing to cybersecurity assessments, maturity reviews, risk and control evaluations, governance framework design and regulatory compliance initiatives. You will help develop policies, standards, procedures,...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking an experienced Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business priorities, assess current security maturity and develop practical, risk-based improvements that align with regulatory obligations, industry standards and organisational objectives. This is an opportunity to contribute to complex transformation programmes while helping organisations build sustainable and effective security practices. Your responsibilities will include leading or contributing to cybersecurity and GRC engagements, including security strategy development, operating model design, governance reviews, risk assessments, control evaluations, compliance assessments...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business and technology risks, assess current security maturity and design practical, proportionate improvements aligned to regulatory, industry and organisational requirements. This role will involve delivering high-quality advisory engagements across a varied client portfolio, with opportunities to contribute to large-scale transformation programmes and support the development of innovative cybersecurity solutions. Responsibilities will include leading or contributing to cybersecurity strategy reviews, governance assessments, risk and control evaluations, regulatory compliance reviews...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with the development and delivery of cybersecurity strategy, governance, risk and compliance programmes. You will work with senior stakeholders to understand business objectives, assess cyber maturity and translate regulatory, technological and operational requirements into practical, sustainable improvements. This role offers the opportunity to contribute to varied engagements across multiple industries, advising organisations as they strengthen their resilience in an increasingly complex threat landscape. Your responsibilities will include leading and delivering cybersecurity assessments, maturity reviews, risk assessments and compliance engagements; developing security strategies, policies, standards and governance...

Learn more

Senior Technology Risk and Compliance Analyst

Added 20/10/2026

We are seeking a Senior Technology Risk and Compliance Analyst to support the effective management of technology risk, information security and regulatory compliance across a complex business environment. The successful candidate will provide expert advice to technology and business stakeholders, helping to identify, assess and manage risks while promoting a strong culture of control and continuous improvement. Key responsibilities will include maintaining technology risk and control frameworks, coordinating risk and control assessments, and monitoring remediation activity to ensure issues are addressed within agreed timescales. You will support internal and external audits, regulatory reviews and assurance activities, preparing clear evidence, reports...

Learn more

Group AI Governance, Risk and Compliance Manager (DPO)

Added 15/10/2026

We are seeking an experienced Group AI Governance, Risk and Compliance Manager (DPO) to lead the development and implementation of a robust framework for the responsible, lawful and secure use of artificial intelligence across a complex, multi-jurisdictional organisation. This is a senior role requiring strong expertise in data protection, AI regulation, information governance and enterprise risk management, together with the ability to translate evolving requirements into practical business controls. You will establish and maintain AI governance policies, standards, procedures and assurance processes, ensuring that AI systems are appropriately assessed, documented, monitored and reviewed throughout their lifecycle. Key responsibilities will include...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking a Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance activities. This is a key role responsible for ensuring that security policies, controls and processes are aligned with business objectives, regulatory requirements and recognised industry standards. You will work closely with technology, legal, privacy, audit, operational and senior leadership teams to promote a strong, practical and risk-aware security culture. Your responsibilities will include developing, maintaining and communicating security policies, standards and procedures; managing the information security risk register; coordinating risk assessments and control reviews; and monitoring the...

Learn more

Governance, Risk & Compliance (GRC) Infosec Manager (PCI)

Added 13/10/2026

We are seeking an experienced Governance, Risk & Compliance (GRC) Infosec Manager with strong expertise in Payment Card Industry Data Security Standard (PCI DSS) compliance. This role will lead the development, implementation and continuous improvement of information security governance, risk management and compliance activities across a complex technology and business environment. You will act as a trusted adviser to senior stakeholders, helping to embed effective security practices while ensuring regulatory, contractual and industry requirements are consistently met. Key responsibilities will include owning the PCI DSS compliance programme, coordinating assessments and audits, maintaining policies, standards and control frameworks, and monitoring remediation...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead the development and continuous improvement of information security governance, risk management and compliance practices. This role will help strengthen organisational resilience, protect sensitive information and ensure that security activities align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to security. Key responsibilities will include maintaining security policies, standards, procedures and control frameworks; managing information security and technology risk assessments; overseeing risk registers, treatment plans and exception processes; and...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead the development, implementation and continuous improvement of information security governance and risk management practices. This role will help strengthen organisational resilience, support regulatory compliance and ensure that security controls are aligned with business objectives. You will work closely with technology, legal, privacy, audit, procurement and operational teams to embed effective security practices across the organisation. Key responsibilities include maintaining and improving security policies, standards, procedures and control frameworks; managing enterprise security risk assessments and treatment plans; coordinating internal and external audits; monitoring compliance with relevant legislation, regulations...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance programmes. This role will help ensure that security practices support business objectives while meeting regulatory, contractual and industry requirements. You will work closely with technology, legal, privacy, internal audit and operational teams to establish effective controls, promote security awareness and provide clear, practical advice on managing information and cyber risk. Key responsibilities will include maintaining and improving security policies, standards, procedures and control frameworks; coordinating enterprise security risk assessments; managing risk registers, treatment plans and exception...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.