Job Search

We are seeking an experienced IT Security Governance Lead to strengthen and mature the organisation’s information security governance framework. In this influential role, you will provide strategic direction, establish effective security policies and standards, and ensure that technology and business practices align with regulatory obligations, industry frameworks, and organisational risk appetite. You will work closely with senior stakeholders, technology teams, internal audit, risk management, and business leaders to promote a consistent and practical approach to information security.

Your responsibilities will include maintaining the information security policy framework; coordinating risk assessments, control reviews, and governance reporting; monitoring compliance with applicable legislation and recognised standards; and supporting the development and tracking of remediation plans. You will oversee security metrics and dashboards, prepare clear reports for governance committees and senior leadership, and provide constructive challenge where risks or control weaknesses are identified. The role will also contribute to audit activity, third-party and supplier assurance, security exception management, incident governance, and the continuous improvement of security processes and controls.

To succeed, you will have substantial experience in information security governance, risk, compliance, or a closely related discipline, ideally within a complex technology environment. You will be confident interpreting regulatory and framework requirements, including standards such as ISO 27001, NIST, or COBIT, and translating them into effective business controls. Strong stakeholder management, communication, analytical, and influencing skills are essential, as is the ability to explain technical and risk-related matters to both specialist and non-specialist audiences. Relevant professional qualifications, such as CISM, CISSP, CRISC, or ISO 27001 Lead Implementer or Auditor, would be advantageous. The successful candidate will be organised, pragmatic, detail-focused, and capable of balancing governance discipline with the need to support business delivery.