Head of Security Governance

Nicoll Curtin; Greater London; Hybrid; GBP 81,000 - 135,000; Full time

Benefits offered by this job

Bonus

Benefits

Job summary

Nicoll Curtin is recruiting a Head of Security Governance in London. This hybrid role (3 days per week on-site) leads the governance function across the EMEA region for a major financial institution, shaping policy and risk oversight.

You will interface with security, technology, risk, compliance and executive stakeholders to ensure controls are effective, measurable and aligned with regulatory expectations, while developing governance strategy and a high-performing team.

Qualifications

• Senior leadership in governance, risk and compliance (GRC) within security.
• Experience engaging regulators, audit functions and executives.
• Strong knowledge of ISO 27001, NIST, COBIT and SWIFT CSP.

Responsibilities

• Lead the Security Governance function across EMEA.
• Own security policy, standards and governance frameworks.
• Oversee cyber risk assessments, control maturity reviews and audit activity.
• Lead regulatory and industry security assessments, including ISO 27001 and SWIFT CSP.
• Drive security awareness, training and phishing simulation programmes.
• Develop executive-level reporting, KPIs and KRIs.
• Manage governance processes, issue remediation and control oversight.
• Lead and develop a high-performing governance team.

Skills

InfoSec Governance

GRC

Regulatory engagement

Frameworks (ISO27001/NIST/COBIT/SWIFTC

Executive stakeholder comms

Security policy & controls

Job description

Head of Security Governance London (Hybrid - 3 days per week), Up to £135k + Bonus + Benefits

Are you an Elite, Senior GRC director, and do you want to be responsible for the driving goverance across a world class organisation?

We're supporting a major international financial institution in the appointment of a Head of Security Governance to lead and mature cyber governance across its EMEA operations.

This is a senior leadership role within the CISO function, responsible for defining and driving security governance strategy across multiple business entities. You'll act as the key interface between security, technology, risk, compliance, audit and senior business stakeholders, ensuring security controls are effective, measurable and aligned with regulatory expectations.

Key Responsibilities

• Lead the Security Governance function across EMEA.
• Own security policy, standards and governance frameworks.
• Oversee cyber risk assessments, control maturity reviews and audit activity.
• Lead regulatory and industry security assessments, including ISO 27001 and SWIFT CSP.
• Drive security awareness, training and phishing simulation programmes.
• Develop executive-level reporting, KPIs and KRIs.
• Manage governance processes, issue remediation and control oversight.
• Lead and develop a high-performing governance team.

What We're Looking For

• Significant experience within Information Security Governance, GRC, Technology Risk or Cyber Risk.
• Strong background within banking, financial services or another highly regulated environment.
• Expertise across security policy, audit, assurance and control frameworks.
• Experience engaging with regulators, audit functions and executive stakeholders.
• Strong understanding of frameworks such as ISO 27001, NIST, COBIT and SWIFT CSP.
• Professional certifications such as CISSP, CISM, CISA or CRISC preferred.

This is an excellent opportunity to join an organisation that takes cyber security seriously and is investing heavily in strengthening its governance and control environment across the region.