Job Search

We are seeking an experienced Information and Security Governance Lead to strengthen organisational resilience, information assurance and security oversight. This role will provide strategic direction across information security governance, risk management, compliance and policy, ensuring that appropriate controls are embedded across business operations and technology environments. You will work closely with senior stakeholders, technology teams, risk specialists and operational leaders to promote a strong, practical and risk-aware security culture.

Key responsibilities will include developing, maintaining and continuously improving information security policies, standards, frameworks and governance processes. You will lead the identification, assessment and treatment of information and cyber security risks, oversee security assurance activities, and monitor the effectiveness of controls through reporting, metrics and review programmes. The role will also coordinate responses to audits, regulatory requirements, customer assurance requests and other compliance obligations. You will support the management of security incidents, risks and exceptions, ensuring that actions are appropriately documented, prioritised and followed through to completion. In addition, you will contribute to business continuity, data protection, supplier assurance and security-by-design initiatives.

The successful candidate will have substantial experience in information security governance, risk, compliance or assurance, with a strong understanding of recognised security frameworks and relevant regulatory expectations. Professional qualifications in information security, risk management, audit or a related discipline are desirable. You should be confident communicating complex security matters to both technical and non-technical audiences, influencing stakeholders at all levels and producing clear, concise reports for governance forums and senior decision-makers. Strong analytical, organisational and relationship-building skills are essential, along with the ability to manage competing priorities and deliver sustainable improvements in a changing environment. Experience leading governance programmes, managing third-party risk and embedding security controls across large or complex environments would be advantageous.