Head of Information Security GRC

2 weeks ago

London, United Kingdom Tria Full time

Location: London (onsite 2 days per week)
Duration: 6 months

Rate: Inside IR35, rate to be discussed

Are you an experienced Head of Information Security Governance, Risk and Compliance looking for your next opportunity to make an impact within an evolving and fast paced environment? Do you have strong experience of leading 3rd party security assurance processes? If so, apply now.

We are seeking an experienced Head of InfoSec GRC & Awareness to lead governance, risk, compliance, and security awareness initiatives across an organisation at a time of significant modernisation. This pivotal role ensures a robust security posture by developing and enforcing policies, standards, and training programmes aligned with business objectives and regulatory requirements.

The key responsibilities of the Head of Information Security GRC & Awareness are:

Lead the development and enforcement of enterprise-wide information security policies and standards.
Drive security governance and cyber maturity through compliance, assurance reviews, and gap analysis.
Oversee the Information Security Risk Management process
Conducting in depth supplier due diligence / third party assurance processes
Manage audit readiness and support internal/external audit activities.
Own and deliver the organisation's security awareness programme, including campaigns and tailored training.
Depending on the candidate, you would also be involved in developing and implementing an Operational Technology (OT) Security Assurance Framework.

The successful candidate will have the following skills, experience and qualifications:

Professional certifications such as CISSP, CISM, ISO27001 Lead Auditor, CLAS etc
Extensive experience in information security or IT governance within large, complex environments.
Strong knowledge of security frameworks (ISO/IEC 27001, NIST CSF, CIS Controls, Cyber Essentials).
Proven track record in risk management, policy development, and security awareness initiatives.
Excellent communication, leadership, and influencing skills.
Very strong experience of driving 3rd party due diligence
Any experience of driving Technical Assurance, Operational Technology (OT) Security Assurance and Penetration Testing would be a bonus

This is an excellent opportunity to lead a critical function within a dynamic organisation, ensuring security resilience and cultural change across the enterprise.

The rate is competitive and we can discuss this directly. For further information, please apply and I will be in touch.

Head of InfoSec GRC & Awareness

Head of Information Security Governance, Risk and Compliance

  • Information Security Grc Analyst

    1 week ago

    City of London, United Kingdom i3 Resourcing Limited Full time

    **Information Security GRC Analyst** **£47,000 - £55,000** **2-3 days in a London office / 1-2 days from home** **EXCELLENT full benefits package and bonus** **Information Security GRC Analyst, Governance, Risk, Compliance, Security Risk, Privacy Risk, Management Information, ISO27001, NIST, SOX, Firewalls, IDS/IPS, DLP, Information Security Analyst,...

  • Head of Information Security GRC

    1 week ago

    London, United Kingdom TRIA Full time £150 - £200

    Location: London (onsite 2 days per week) Duration: 6 monthsHave you got the right qualifications and skills for this job Find out below, and hit apply to be considered.Rate: Inside IR35, rate to be discussedAre you an experienced Head of Information Security Governance, Risk and Compliance looking for your next opportunity to make an impact within an...

  • Head Of Information Security GRC

    3 days ago

    London, United Kingdom TRIA Full time £150 - £200

    Location: London (onsite 2 days per week) Duration: 6 monthsHave you got the right qualifications and skills for this job Find out below, and hit apply to be considered.Rate: Inside IR35, rate to be discussedAre you an experienced Head of Information Security Governance, Risk and Compliance looking for your next opportunity to make an impact within an...

  • Head Of Information Security GRC

    1 week ago

    Greater London, United Kingdom Tria Full time

    Location: London (onsite 2 days per week) Duration: 6 monthsRate: Inside IR35, rate to be discussedAre you an experienced Head of Information Security Governance, Risk and Compliance looking for your next opportunity to make an impact within an evolving and fast paced environment? Do you have strong experience of leading 3rd party security assurance...

  • Head of Information Security GRC

    7 days ago

    London, United Kingdom Trainline Full time £150 - £200

    About usApply promptly! A high volume of applicants is expected for the role as detailed below, do not wait to send your CV.We are champions of rail, inspired to build a greener, more sustainable future of travel. Trainline enables millions of travellers to find and book the best value tickets across carriers, fares, and journey options through our highly...

  • Head of Information Security GRC

    3 days ago

    London, United Kingdom Trainline Full time £150 - £200

    About usApply promptly! A high volume of applicants is expected for the role as detailed below, do not wait to send your CV.We are champions of rail, inspired to build a greener, more sustainable future of travel. Trainline enables millions of travellers to find and book the best value tickets across carriers, fares, and journey options through our highly...

  • Head of Information Security GRC

    5 days ago

    City Of London, United Kingdom Trainline Full time

    About us We are champions of rail, inspired to build a greener, more sustainable future of travel. Trainline enables millions of travellers to find and book the best value tickets across carriers, fares, and journey options through our highly rated mobile app, website, and B2B partner channels. Great journeys start with Trainline 🚄 Now Europe’s number 1...

  • Head of Information Security GRC

    6 days ago

    London, Greater London, United Kingdom Trainline Full time £50,000 - £120,000 per year

    About usWe are champions of rail, inspired to build a greener, more sustainable future of travel. Trainline enables millions of travellers to find and book the best value tickets across carriers, fares, and journey options through our highly rated mobile app, website, and B2B partner channels. Great journeys start with Trainline  Now Europe's number 1...

  • GRC Information Security Analyst

    3 weeks ago

    London, United Kingdom hireful. Full time

    Are you looking to join a global software technology company, with their main base of operations here, in the UK, as an experienced GRC Information Security Analyst? Do you have experience in the GRC Security space with audits, auditors, ISO27001, PCI DSS, SOC2, NIST & current compliance regulations? If so & you are looking to expand your information...

  • Information Security Specialist: GRC

    2 weeks ago

    London, Greater London, United Kingdom UK National Audit Office Full time £68,000 - £80,000 per year

    • Role: Information Security Specialist: GRC• Type of contract: Full Time, permanent• Location: Hybrid working. On-site, London or Newcastle, minimum 2 days pw• Salary: London c£68,000 Newcastle c£59,000 plus Civil Service employer pension contribution of 28.9%Please note, we are not able to sponsor work visas or accept temporary visas as we are...