Information Security Risk Manager

JR United Kingdom; London; Hybrid; GBP 80,000 - 95,000; Full time

Job summary

A leading global insurance firm is seeking an Information Security Risk Manager in London. This strategic role focuses on identifying and mitigating IT and cybersecurity risks. The successful candidate will drive risk management initiatives and collaborate with stakeholders to enhance security controls. A hybrid working model is offered, along with a competitive salary and bonus.

Qualifications

• Strong experience in Information Security, focusing on Governance, Risk, and Compliance.
• Expertise in risk frameworks and IT policy development.

Responsibilities

• Develop and implement IT risk management strategies.
• Lead end-to-end risk remediation and conduct risk assessments.
• Collaborate with auditors and manage vendor risk.

Skills

Governance

Risk Management

Compliance

Education

CISA

CRISC

CISM

Tools

NIST

ISO 27001

Cyber Essentials

Job description

Social network you want to login/join with:

Information Security Risk Manager, london

col-narrow-left

Client:

Location:

london, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

16.05.2025

Expiry Date:

30.06.2025

col-wide

Job Description:

Information Security Risk Manager – London (Hybrid) – FS – Up to £95,000 + Bonus

La Fosse has partnered with a leading global insurance firm to hire an Information Security Risk Manager. This strategic role is focused on identifying, assessing, and mitigating IT and cybersecurity risks across the business.

You will drive key risk management initiatives, working closely with stakeholders to strengthen security controls and ensure organisational resilience in a rapidly evolving threat landscape.

Key Responsibilities:

• Develop and implement IT risk management strategies, identifying vulnerabilities and prioritising risks.
• Lead end-to-end risk remediation, ensuring security enables business operations.
• Conduct risk assessments, monitor threats, and maintain control frameworks (NIST, ISO 27001, Cyber Essentials).
• Produce risk management reports and support board-level reporting.
• Collaborate with auditors, regulators, and vendors to evaluate IT controls.
• Manage vendor risk, maintain information asset registers, and drive incident management.

Requirements:

• Strong experience in Information Security, focusing on Governance, Risk, and Compliance (GRC).
• Expertise in risk frameworks (NIST, ISO 27001, Cyber Essentials) and IT policy development.
• Relevant certifications (CISA, CRISC, CISM) are highly preferred.

For more information, please apply directly