Information Security Risk Management Lead

London
4 days ago
Create job alert

Information Security Risk Management Lead

Location: London – Hybrid working – 2 Days a week onsite
Salary: £100,000 - £135,000 Plus bonus and benefits

As the Information Security Risk Management Lead, you’ll be a pivotal part of the Risk Management team. You will lead the implementation of Enterprise and Operational Risk Management frameworks designed to identify, measure, monitor, and mitigate information security risks effectively.
Acting as a trusted advisor and a critical "second set of eyes", you will provide a credible review and challenge the effectiveness of information security processes and controls across the organisation.
This role offers an opportunity to lead and influence critical security risk strategies within a global organisation. You’ll play a vital role in shaping and safeguarding the organisation's security risk posture in an ever-evolving threat landscape.
 
What We’re Looking For
Experience & Expertise

10+ years’ experience in information security governance, operations, and risk management.
Expertise in global, high-volume, and highly regulated transaction services environments with a continuous availability mandate.
Proven track record of developing and managing Operational Risk Management frameworks in line with Basel and industry best practices.
Strong leadership capabilities within matrixed organisations, particularly in dynamic environments.
Knowledge of evolving and emerging information security domains such as Cyber Resilience, Cloud Security, Threat Management, Incident Response, and more.
Familiarity with policy frameworks and hands-on exposure to frameworks like NIST CSF, ISO 27001, and others.Educational & Professional Qualifications

Bachelor’s degree in Computer Science, Cybersecurity, Information Management, or a related field.
Certifications such as CISSP, CISM, CISA, CRISC preferred.
Proficiency in MS PowerPoint and Excel; familiarity with broader MS Office tools like Visio and Project is a plus.
Knowledge of enterprise GRC tools like Archer is an advantage. 
If you are interested and looking or your next role, please apply with a copy of your CV or email – (url removed) for more information!

At Investigo, we make recruitment feel easy.
Let’s keep this simple. We’re all about your success, as your success is our business. We are part of The IN Group, a collection of six award-winning specialist brands that supply the globe with end-to-end talent solutions. With recruitment at the core of our business, we’ve been connecting people since 2003.

Data & Privacy
By applying, you consent to Investigo collecting and processing your data for the purpose of recruitment and placement, in accordance with applicable data protection laws. For more information, please refer to our Privacy Notice at (url removed)

Related Jobs

View all jobs

IT Security Manager / Consultant

Security & Information Risk Advisor (SIRA) – SC Cleared

Information Security Officer - Outside Contract

GCP Governance Manager

Information Security Manager

Information Security Officer

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Maths for Cyber Security Jobs: The Only Topics You Actually Need (& How to Learn Them)

If you are applying for cyber security jobs in the UK it can feel like “real security people” must be brilliant at maths. The reality is simpler: most roles do not need degree-level pure maths. What they do need is confidence with a small set of practical topics that show up repeatedly in day-to-day work across SOC, incident response, cloud security, AppSec, threat detection, IAM & security engineering. This guide strips the maths down to what actually helps you get hired. It includes a 6-week learning plan plus portfolio projects you can publish to prove the skills. You will focus on: Number systems & bitwise thinking (binary, hex, bytes, XOR) Modular arithmetic basics (enough to understand how modern crypto “works”) Probability & statistics for detection, triage & risk Discrete maths for logic, sets, graphs & complexity Security maths habits: estimation, false positive control & evidence-led reporting You will not waste time on heavy theory that rarely appears in junior or mid-level cyber security roles.

Neurodiversity in Cyber Security Careers: Turning Different Thinking into a Superpower

Cyber security is all about thinking like an attacker, spotting unusual patterns, protecting systems & responding calmly when everything looks like it’s on fire. It’s a discipline built on curiosity, persistence & noticing things other people miss. That’s exactly why it can be such a good fit for many neurodivergent people. If you live with ADHD, autism or dyslexia, you may have been told your brain is “too distracted”, “too literal” or “too disorganised” for a security role. In reality, the traits that can make traditional office work tough often line up beautifully with cyber security work – from hyperfocus in incident response to meticulous analysis in threat hunting. This guide is written for cyber security job seekers in the UK. We’ll look at: What neurodiversity means in a cyber context How ADHD, autism & dyslexia strengths map to different security roles Practical workplace adjustments you can ask for under UK law How to talk about neurodivergence during applications & interviews By the end, you’ll have a clearer sense of where you might thrive in cyber security – & how to turn “different thinking” into a genuine superpower.

Cyber Security Hiring Trends 2026: What to Watch Out For (For Job Seekers & Recruiters)

As we move into 2026, the cyber security jobs market in the UK is changing fast. Attackers are scaling up with automation & AI, cloud estates are more complex, & regulators are tightening expectations around resilience & data protection. At the same time, budgets are under pressure & some organisations are consolidating their tech teams. Despite all this, demand for cyber security skills remains strong. Skilled defenders, engineers & leaders are still hard to find, & the stakes are only getting higher. Whether you are a cyber security job seeker planning your next move, or a recruiter building security teams, understanding the key cyber security hiring trends for 2026 will help you make better decisions.