Chief Information Security & IT Governance Leader

Vwfs Uk; Milton Keynes; On-site; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Discretionary bonus up to 25%

Pension contribution 9%

ECO car scheme

Job summary

VWFS UK is seeking a Head of Information Security and IT Governance to lead our information security, technology risk, governance and operational resilience. You will shape our security strategy, policies and controls to protect critical services and data, while enabling responsible innovation and regulatory compliance.

You will provide strategic direction to senior leaders and boards, oversee third-party risk, and drive incident response and resilience initiatives, building a high-performing,

Qualifications

• Significant senior-level experience in information security and governance.
• Experience embedding security frameworks, policies and controls.
• Strong knowledge of regulatory requirements for information security and resilience.
• Proven ability to lead responses to cyber incidents and risk events.
• Experience managing internal/external audits and assurance programs.

Responsibilities

• Provide strategic leadership across information security, technology risk and governance.
• Develop and maintain policies, controls and governance frameworks.
• Lead emerging technology risk, incl. AI, automation and digital capabilities.
• Oversee supplier and third-party technology risk and assurance.
• Advise senior leaders and boards on complex risk with business impact.
• Lead incident response and resilience initiatives; manage recovery priorities.
• Develop and inspire high-performing, inclusive teams.

Skills

Information security leadership

Governance & risk management

Regulatory compliance

Strategic communication

Stakeholder management

Incident response

Tools

SMCR experience

Audits & assurance

Job description

VWFS UK is seeking a Head of Information Security and IT Governance to lead our information security, technology risk, governance and operational resilience. You will shape our security strategy, policies and controls to protect critical services and data, while enabling responsible innovation and regulatory compliance.

You will provide strategic direction to senior leaders and boards, oversee third-party risk, and drive incident response and resilience initiatives, building a high-performing,