Head of Information Security

Tenth Revolution Group; Manchester; Hybrid; GBP 90,000 - 110,000; Full time

Job summary

Tenth Revolution Group is seeking a Head of Information Security in Manchester with remote-first flexibility. You will own security governance, risk and assurance, report to the CTO and shape the bank's security strategy as the business grows.

Lead governance, risk, and supplier risk programs, develop policies aligned with ISO 27001 and NIST CSF, and drive audit readiness across cloud and SaaS environments.

Qualifications

• Experience leading security governance, risk and assurance in regulated environments.
• Strong knowledge of GRC and security controls.
• Proven ability to manage third-party security assurance and supplier risk.

Responsibilities

• Leading information security governance, risk management and assurance.
• Overseeing third-party suppliers, MSPs and security controls.
• Developing security frameworks, policies and processes aligned with ISO 27001, NIST CSF and UK CAF.
• Managing security risk across cloud, SaaS and technology environments.
• Driving security awareness, audit readiness and continuous improvement.
• Reporting security posture to senior leadership and mitigating incidents.

Skills

Security governance

Risk management

GRC leadership

Stakeholder management

Security leadership

Education

CISM or equivalent

Tools

ISO 27001

NIST CSF

Job description

Hiring: Head of Information Security | £100,000

Manchester | Remote-first (Manchester office)

I'm working with an exciting, growing specialist bank looking for a Head of Information Security to take ownership of its security governance, risk and assurance function.

Reporting directly to the CTO, you'll play a key role in shaping the bank's security strategy, strengthening its control environment and ensuring security risks are effectively managed as the business grows.

What you'll be doing:

• Leading information security governance, risk management and assurance.
• Overseeing third-party suppliers, managed service providers and security controls.
• Developing security frameworks, policies and processes aligned with ISO 27001, NIST CSF and UK CAF.
• Managing security risk across cloud, SaaS and technology environments.
• Driving security awareness, audit readiness and continuous improvement.
• Working closely with senior leadership on security reporting, incidents and risk mitigation.

What we're looking for:

• Strong information security leadership experience, ideally within banking, financial services or another regulated environment.
• Excellent knowledge of security governance, risk and compliance (GRC).
• Experience with third-party security assurance and supplier risk.
• Strong stakeholder management and communication skills.
• CISM or equivalent would be advantageous.

This is a fantastic opportunity to join a growing organisation where you'll have real ownership, visibility and the chance to shape its security function.