Cyber & Information Security Risk Lead - £150k

Talantir; Greater London; Hybrid; GBP 120,000 - 150,000; Full time

Job summary

Lawrence Harvey are partnering with a market leading Financial Services firm to appoint an Information Security Risk Review Lead in London. The role, hybrid with 2 days per week on site, offers up to £150,000 total compensation and sits within the Chief Controls Office.

You will influence global information security capabilities and risk governance across a complex, regulated organisation. You will partner with business owners, provide SME guidance on risk and controls, and drive best-practice

Qualifications

• Experience in information security risk management within large, regulated environments.
• Deep understanding of control standards and risk frameworks.
• Ability to partner with business owners and drive risk-based remediation.

Responsibilities

• Partner with business owners to identify, assess and mitigate information security and non-financial risks.
• Provide SME on information security risk and controls across the first line.
• Drive consistency and best practice in control standards across the organisation.
• Review remediation actions for audit findings and sign off on closures.

Skills

Info Security Risk

Risk Governance

Audit & Controls

Regulatory Knowledge

Job description

Role: Cyber & Information Security Risk LeadLocation: London 2 days p/wCompensation: up to £150,000 total comp

Lawrence Harvey are partnered with a market leading Financial Services firm that are on the lookout for a Information Security Risk Review Lead to work within their CCO (Chief Controls Office). This is an excellent opportunity that offers strong oversight and influence over their Global Information Security capabilities.

You'll be working within an incredibly complex, global organisation that are investing heavily into their Security division in 2026 - an excellent time to join the business!

Key Responsibilities:

• Partner with business owners to identify, assess and mitigate Information Security and non-financial risks
• Provide subject matter expertise on Information Security risk and controls across the first line
• Drive consistency and best practice in control standards across the organisation
• Support the identification, assessment and documentation of Information Security risks and controls
• Review self-identified issues and remediation plans to ensure risks are appropriately addressed
• Review and support corrective actions for audit findings from a risk and control perspective
• Validate remediation actions prior to closure and submission to Risk, Compliance and Audit
• Monitor, track and report risk issues, remediation activities and control effectiveness
• Support the assessment and recording of security-related operational risk events
• Review KRIs, investigate breaches and support root cause analysis and remediation plans
• Contribute to risk appetite discussions, emerging risk assessments and governance reporting

Key Requirements:

• Strong experience working within Information Security, Data Management Risk Governance, Operations and Risk Management functions
• Experience working in global, highly regulated and high volume environments
• Deep understanding of industry standards and frameworks such as ISO 27001/27002, NIST CSF, NIST 800-53, COBIT, CIS Critical Security Controls, and ITIL, including their application within enterprise control environments.
• Familiarity with regulatory and compliance frameworks including GDPR, SOC 2, PCI DSS, SOX ITGC, and operational risk frameworks, ensuring alignment between security controls and regulatory expectations.