Hybrid Information Risk Lead — Cyber, Data & AI Assurance

Skipton Building Society; Skipton; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Annual discretionary bonus

25 days annual leave

Company pension contribution

Private medical insurance

Volunteering days

Cycle to work

Job summary

Skipton Building Society is seeking an Information Risk Lead to provide independent second line oversight across cyber, technology, AI, data, and resilience. You will challenge first line activities and guide risk management in line with policy frameworks and appetite.

Leading across risk events, reporting, and initiatives, you will drive assurance and continuous improvement while supporting senior leadership in achieving Enterprise Risk objectives.

Qualifications

• Recognised certification in risk, IT or information security (e.g. CISA/CISM/CISSP/CRISC).
• Strong IT security knowledge with risk and resilience focus.
• Experience in applying NIST and ISO 27001 frameworks.

Responsibilities

• Provide independent second line oversight and challenge of first line activities.
• Guide risk management in accordance with risk frameworks and appetite.
• Oversee cyber/technology risk, AI, data risk, and operational resilience.
• Deliver timely risk reporting and insights to senior committees.
• Support Enterprise Risk objectives and lead information risk initiatives.
• Oversee risk events, incidents, and remediation verification.
• Provide technical leadership and coaching to colleagues.

Skills

CISA/CISM/CISSP/CRISC

IT security

NIST

ISO 27001

Second line risk oversight

Leadership

Analytical thinking

Job description

Skipton Building Society is seeking an Information Risk Lead to provide independent second line oversight across cyber, technology, AI, data, and resilience. You will challenge first line activities and guide risk management in line with policy frameworks and appetite.

Leading across risk events, reporting, and initiatives, you will drive assurance and continuous improvement while supporting senior leadership in achieving Enterprise Risk objectives.