UK Head of IT Risk and Compliance
An exciting opportunity has arisen for a UK Head of IT Risk and Compliance to lead the development and delivery of a robust technology risk and compliance framework. This senior role will provide strategic direction, assurance and constructive challenge across information technology, cyber security, data protection and operational resilience.
You will be responsible for maintaining an effective IT risk management programme, ensuring that risks are identified, assessed, recorded and treated consistently. Working closely with technology and business leaders, you will oversee risk appetite, control effectiveness, remediation plans and management reporting, providing clear insight to senior stakeholders and relevant governance forums.
The role will also lead the organisation’s IT compliance and assurance activities, including the interpretation of regulatory requirements, internal policies and recognised industry standards. You will coordinate audits, assessments and control testing, manage responses to findings, and ensure that agreed actions are delivered within appropriate timescales. A key focus will be supporting compliance with UK regulatory expectations, data protection obligations and information security best practice.
You will build strong relationships with internal teams, external advisers and assurance providers, promoting a culture in which risk ownership and continuous improvement are embedded. The role will contribute to third-party risk management, business continuity, disaster recovery, incident management and technology change governance, ensuring that risk considerations are addressed throughout the technology lifecycle.
Applicants should have substantial experience in IT risk, compliance, information security or technology assurance, ideally within a complex and regulated environment. You will bring a strong understanding of control frameworks and standards such as ISO 27001, COBIT, NIST or equivalent, alongside experience of regulatory engagement, audit management and executive-level reporting. Relevant professional qualifications, such as CISA, CRISC, CISSP, CISM or a comparable risk qualification, would be advantageous.
We are seeking an inclusive and confident leader with excellent communication and influencing skills. You will be comfortable translating technical and regulatory issues for non-technical audiences, challenging constructively and delivering practical solutions. This is an opportunity to shape a mature risk culture while supporting secure, resilient and compliant technology services across the UK.
UK Head of IT Risk and Compliance
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor