Head Of Insider Risk

Morson Edge; Remote; GBP 85,000 - 120,000; Full time

Job summary

A leading energy producer is seeking a senior Head of Insider Risk to provide strategic leadership in managing insider risks across the organization. The ideal candidate will possess extensive experience in security risk, ensuring compliance with industry standards like Cabinet Office guidelines. Responsibilities include developing insider risk policies, managing assurance activities, and fostering a risk-aware culture within the company. This role primarily offers a remote work option for the initial 12-month contract.

Qualifications

• Senior leadership experience in insider risk, security risk, or protective security.
• Knowledge of Cabinet Office and NPSA guidance.
• Experience operating in regulated or HMG-aligned environments.
• Excellent stakeholder management at executive level.

Responsibilities

• Own the organisation's Insider Risk strategy and long-term roadmap.
• Act as executive sponsor for insider risk governance.
• Provide authoritative advice to senior leadership.
• Set and maintain Insider Risk policy aligned to relevant guidance.
• Oversee assurance activity and readiness for audit.

Skills

Senior leadership experience in insider risk

Strong knowledge of Cabinet Office guidance

Proven experience in regulated environments

Excellent stakeholder management

Job description

Head of Insider Risk/Insider Risk Consultant - Inside IR35 - Primarily remote - 12 months initial contract

My client, one of the largest producers of ZERO CARBON energy, is seeking a senior Head of Insider Risk to provide strategic leadership and ownership of the organisation's insider risk and insider threat capability. This role is accountable for setting the vision, policy, governance, and operating model for insider risk, ensuring full compliance with HMG requirements and alignment with industry best practice.

The role operates at a senior level, influencing across personnel security, cyber security, HR, legal, and operational leadership, and ensuring insider risk is managed holistically across multiple business units or licensees.

Key Responsibilities

Strategic Leadership

• Own the organisation's Insider Risk strategy and long-term roadmap
• Act as executive sponsor for insider risk governance and decision-making
• Provide authoritative advice to senior leadership and boards on insider risk exposure

Policy & Governance

• Set and maintain Insider Risk policy aligned to Cabinet Office Personnel Security Policy
• Set and maintain Insider Risk policy aligned to NPSA Insider Risk Mitigation Framework
• Establish and oversee Insider Threat Mitigation Groups and governance forums
• Define escalation, triage, and accountability models

Enterprise Integration

• Ensure joined-up delivery across Personnel Security, Cyber Security, HR, Legal and Compliance

Embed insider risk into enterprise risk management and assurance processes

Assurance & Compliance

• Ensure compliance with HMG and regulatory expectations
• Oversee assurance activity and readiness for audit or regulatory scrutiny
• Monitor programme effectiveness and continuous improvement

Leadership & Culture

• Build a strong insider risk capability and risk-aware culture
• Mentor specialist staff and analysts
• Champion proportionate, ethical, and defensible insider risk practices

Skills & Experience

Essential

• Senior leadership experience in insider risk, security risk, or protective security
• Strong knowledge of Cabinet Office and NPSA guidance
• Proven experience operating in regulated or HMG-aligned environments
• Excellent stakeholder management at executive level

Desirable

• Experience in CNI, nuclear, defence, or highly regulated sectors.
• Background in personnel security, intelligence, or enterprise risk.