UK Head of IT Risk and Compliance

Reference: pilpkhyjsfuens4j77ds

An exciting opportunity has arisen for a UK Head of IT Risk and Compliance to lead the development and delivery of a robust technology risk and compliance framework. This senior role will provide strategic direction, assurance and constructive challenge across information technology, cyber security, data protection and operational resilience.

You will be responsible for maintaining an effective IT risk management programme, ensuring that risks are identified, assessed, recorded and treated consistently. Working closely with technology and business leaders, you will oversee risk appetite, control effectiveness, remediation plans and management reporting, providing clear insight to senior stakeholders and relevant governance forums.

The role will also lead the organisation’s IT compliance and assurance activities, including the interpretation of regulatory requirements, internal policies and recognised industry standards. You will coordinate audits, assessments and control testing, manage responses to findings, and ensure that agreed actions are delivered within appropriate timescales. A key focus will be supporting compliance with UK regulatory expectations, data protection obligations and information security best practice.

You will build strong relationships with internal teams, external advisers and assurance providers, promoting a culture in which risk ownership and continuous improvement are embedded. The role will contribute to third-party risk management, business continuity, disaster recovery, incident management and technology change governance, ensuring that risk considerations are addressed throughout the technology lifecycle.

Applicants should have substantial experience in IT risk, compliance, information security or technology assurance, ideally within a complex and regulated environment. You will bring a strong understanding of control frameworks and standards such as ISO 27001, COBIT, NIST or equivalent, alongside experience of regulatory engagement, audit management and executive-level reporting. Relevant professional qualifications, such as CISA, CRISC, CISSP, CISM or a comparable risk qualification, would be advantageous.

We are seeking an inclusive and confident leader with excellent communication and influencing skills. You will be comfortable translating technical and regulatory issues for non-technical audiences, challenging constructively and delivering practical solutions. This is an opportunity to shape a mature risk culture while supporting secure, resilient and compliant technology services across the UK.

COMPETITIVE SALARY
Added 02/11/2026
Reference: pilpkhyjsfuens4j77ds

Other similar jobs

UK Head of IT Risk & Compliance

Added 30/10/2026

An exciting opportunity has arisen for a UK Head of IT Risk & Compliance to lead the development and delivery of a robust technology risk and compliance framework across a complex, multi-site environment. This senior role will provide strategic direction, challenge and assurance, ensuring that information technology risks are identified, managed and reported effectively. You will own the IT risk management lifecycle, including risk identification, assessment, treatment, monitoring and reporting. Working closely with technology, information security, internal audit, legal and business stakeholders, you will ensure that appropriate controls are designed, implemented and maintained. You will also oversee compliance with relevant...

Learn more

Head of Information Security, Risk and Compliance

Added 22/09/2026

We are seeking an experienced Head of Information Security, Risk and Compliance to lead the development and delivery of a robust security, risk and compliance programme. This is a senior leadership role responsible for protecting information assets, strengthening organisational resilience and ensuring that security practices support business objectives. You will establish a clear strategic roadmap, provide trusted advice to senior stakeholders and promote a culture in which security and responsible risk management are embedded across the organisation. Your responsibilities will include owning information security governance, policies, standards and control frameworks; overseeing risk identification, assessment, treatment and reporting; and ensuring compliance...

Learn more

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Learn more

Head of Compliance and Data Privacy - 12 month FTC

Added 15/09/2026

We are seeking an experienced Head of Compliance and Data Privacy for a 12-month fixed-term contract. This is a senior role with responsibility for leading the compliance and data privacy agenda across the organisation, ensuring that appropriate frameworks, policies and controls are in place and operating effectively. You will provide pragmatic, commercially focused advice to senior stakeholders and support a strong culture of ethical conduct, accountability and regulatory awareness. Your responsibilities will include overseeing the compliance and data protection framework, monitoring changes in relevant laws and regulations, and assessing their impact on the business. You will maintain and update policies,...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with cybersecurity strategy, governance, risk and compliance. You will help organisations understand their cyber risk, strengthen their security posture and develop practical, sustainable approaches to managing technology and information security. Working as part of a collaborative consulting team, you will engage with senior stakeholders, translate business objectives into security priorities and provide clear, commercially focused advice. Your responsibilities will include leading and contributing to cybersecurity assessments, maturity reviews, risk and control evaluations, governance framework design and regulatory compliance initiatives. You will help develop policies, standards, procedures,...

Learn more

Senior Technology Risk and Compliance Analyst

Added 20/10/2026

We are seeking a Senior Technology Risk and Compliance Analyst to support the effective management of technology risk, information security and regulatory compliance across a complex business environment. The successful candidate will provide expert advice to technology and business stakeholders, helping to identify, assess and manage risks while promoting a strong culture of control and continuous improvement. Key responsibilities will include maintaining technology risk and control frameworks, coordinating risk and control assessments, and monitoring remediation activity to ensure issues are addressed within agreed timescales. You will support internal and external audits, regulatory reviews and assurance activities, preparing clear evidence, reports...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with the development and delivery of cybersecurity strategy, governance, risk and compliance programmes. You will work with senior stakeholders to understand business objectives, assess cyber maturity and translate regulatory, technological and operational requirements into practical, sustainable improvements. This role offers the opportunity to contribute to varied engagements across multiple industries, advising organisations as they strengthen their resilience in an increasingly complex threat landscape. Your responsibilities will include leading and delivering cybersecurity assessments, maturity reviews, risk assessments and compliance engagements; developing security strategies, policies, standards and governance...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business and technology risks, assess current security maturity and design practical, proportionate improvements aligned to regulatory, industry and organisational requirements. This role will involve delivering high-quality advisory engagements across a varied client portfolio, with opportunities to contribute to large-scale transformation programmes and support the development of innovative cybersecurity solutions. Responsibilities will include leading or contributing to cybersecurity strategy reviews, governance assessments, risk and control evaluations, regulatory compliance reviews...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking an experienced Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business priorities, assess current security maturity and develop practical, risk-based improvements that align with regulatory obligations, industry standards and organisational objectives. This is an opportunity to contribute to complex transformation programmes while helping organisations build sustainable and effective security practices. Your responsibilities will include leading or contributing to cybersecurity and GRC engagements, including security strategy development, operating model design, governance reviews, risk assessments, control evaluations, compliance assessments...

Learn more

Group AI Governance, Risk and Compliance Manager (DPO)

Added 15/10/2026

We are seeking an experienced Group AI Governance, Risk and Compliance Manager (DPO) to lead the development and implementation of a robust framework for the responsible, lawful and secure use of artificial intelligence across a complex, multi-jurisdictional organisation. This is a senior role requiring strong expertise in data protection, AI regulation, information governance and enterprise risk management, together with the ability to translate evolving requirements into practical business controls. You will establish and maintain AI governance policies, standards, procedures and assurance processes, ensuring that AI systems are appropriately assessed, documented, monitored and reviewed throughout their lifecycle. Key responsibilities will include...

Learn more

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Cybersecurity Governance, Risk and Compliance

Added 06/10/2026

We are seeking an experienced Cybersecurity Governance, Risk and Compliance professional to strengthen the organisation’s information security framework and support the effective management of cyber risk. This role will help ensure that security policies, controls and processes align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to cybersecurity. Key responsibilities will include maintaining and improving cybersecurity governance frameworks, policies, standards and procedures; coordinating enterprise-wide risk assessments; tracking remediation activities; and preparing clear reports for senior leadership and relevant governance committees. You...

Learn more

Cybersecurity Risk and Compliance Associate

Added 22/09/2026

We are seeking a Cybersecurity Risk and Compliance Associate to support the ongoing development, implementation, and monitoring of information security risk and compliance activities. In this role, you will help assess cybersecurity risks, maintain accurate governance documentation, and support the organisation in meeting applicable regulatory, contractual, and internal security requirements. You will work closely with technology, privacy, legal, internal audit, and business teams to promote effective risk management and security-aware decision-making. Key responsibilities include coordinating risk assessments, documenting findings, tracking remediation plans, and monitoring the timely completion of corrective actions. You will assist with maintaining policies, standards, procedures, risk registers,...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.