Head of Information Security Risk and Compliance

Please note:
Thanks for your interest in this role - j
ust to be clear, this is not a job working at ivee.
This is a live role with a client, listed through ivee.

ivee is exclusively for people restarting, pivoting, or returning to work within the UK. Please do not apply if you are outside the UK.

Have you taken a career break or are you looking to pivot into something new?

At ivee, we're rebuilding the path back into work for people restarting, changing direction, or finding their way back onto the career ladder. We know traditional platforms are built for those already in work - we're built for everyone else.

Our community helps you rebuild confidence, refresh your skills, and connect with employers who value non-linear careers. Through hands-on upskilling, mentoring, and direct access to flexible, vetted roles, ivee helps you prepare for, and land, the right opportunity.

Press apply to express your interest in ivee and apply for this role on our platform:

Overview

This is Europe's leading independent rail and coach platform, driving the future of sustainable travel through technology. With over
125 million monthly visits
and partnerships across
270+ transport operators
, this award-winning app makes travel smarter, simpler, and greener.

They're now seeking a
Head of Information Security Risk and Compliance
to lead the company's governance, risk, and compliance (GRC) strategy. Reporting to the CISO, you'll head up a team of analysts and associates to ensure their information security risk and compliance framework remains robust, forward-looking, and aligned with international standards such as
ISO 27001, ISO 22301, and PCI DSS
.

This is a pivotal leadership role — influencing executive decision-making, collaborating across Legal, Engineering, and Procurement, and embedding a culture of security awareness across the business.

The Role

As the Head of Information Security Risk and Compliance, you will:

• Lead and evolve the company's
  Information Security Management System (ISMS)
  and
  Business Continuity Management System (BCMS)
  .
• Manage, mentor, and develop a high-performing Risk and Compliance team.
• Embed information security governance across business operations and strategic projects.
• Oversee
  third-party and supplier risk management
  , ensuring security controls are maintained throughout procurement and onboarding.
• Deliver data-driven, high-quality risk and compliance reporting to senior stakeholders and leadership.
• Act as a trusted advisor to executives, influencing strategic decision-making with actionable insights.
• Ensure compliance with key standards and regulations (ISO 27001, ISO 22301, PCI DSS, GDPR).
• Partner with Legal, Engineering, and Procurement to align technology and security initiatives.
• Champion organisation-wide security awareness and governance training programmes.
• Maintain and communicate up-to-date information security policies that adapt to new risks and threats.

About You

You are an experienced security leader with the vision and authority to shape governance frameworks across a fast-moving, global business. You're analytical, collaborative, and capable of translating complex risk landscapes into practical, actionable strategies.

You will:

• Have extensive experience in
  information security risk and compliance management
  , ideally within a regulated or technology-driven organisation.
• Demonstrate strong leadership, with a proven record of developing and motivating teams.
• Be fluent in
  ISO 27001
  ,
  ISO 22301
  ,
  PCI DSS
  ,
  GDPR
  , and similar frameworks.
• Possess excellent analytical and critical thinking skills, with the ability to assess, quantify, and communicate risk.
• Be comfortable engaging with executive stakeholders, presenting complex information clearly and credibly.
• Have experience integrating risk management into
  day-to-day business operations
  .
• Take a collaborative, pragmatic approach - balancing compliance with commercial priorities.
• Bring excellent written and verbal communication skills and strong stakeholder management experience.

Please press apply to access the full job description and apply for this role.