Information Security Risk Manager

JR United Kingdom; Slough; Hybrid; GBP 80,000 - 110,000; Full time

Job summary

A leading global insurance firm seeks an Information Security Risk Manager based in Slough, focusing on identifying and mitigating IT and cybersecurity risks. This strategic position involves driving key risk management initiatives, collaborating with stakeholders, and ensuring security resilience in a dynamic threat landscape.

Qualifications

• Strong experience in Information Security, focusing on Governance, Risk, and Compliance (GRC).
• Expertise in risk frameworks and IT policy development.
• Relevant certifications (CISA, CRISC, CISM) are highly preferred.

Responsibilities

• Develop and implement IT risk management strategies.
• Lead end-to-end risk remediation ensuring security enables business operations.
• Conduct risk assessments and maintain control frameworks.

Skills

Governance

Risk Management

Compliance

Cybersecurity

Education

CISA

CRISC

CISM

Tools

NIST

ISO 27001

Cyber Essentials

Job description

Social network you want to login/join with:

Information Security Risk Manager, slough

col-narrow-left

Client:

Location:

slough, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

Information Security Risk Manager – London (Hybrid) – FS – Up to £95,000 + Bonus

La Fosse has partnered with a leading global insurance firm to hire an Information Security Risk Manager. This strategic role is focused on identifying, assessing, and mitigating IT and cybersecurity risks across the business.

You will drive key risk management initiatives, working closely with stakeholders to strengthen security controls and ensure organisational resilience in a rapidly evolving threat landscape.

Key Responsibilities:

• Develop and implement IT risk management strategies, identifying vulnerabilities and prioritising risks.
• Lead end-to-end risk remediation, ensuring security enables business operations.
• Conduct risk assessments, monitor threats, and maintain control frameworks (NIST, ISO 27001, Cyber Essentials).
• Produce risk management reports and support board-level reporting.
• Collaborate with auditors, regulators, and vendors to evaluate IT controls.
• Manage vendor risk, maintain information asset registers, and drive incident management.

Requirements:

• Strong experience in Information Security, focusing on Governance, Risk, and Compliance (GRC).
• Expertise in risk frameworks (NIST, ISO 27001, Cyber Essentials) and IT policy development.
• Relevant certifications (CISA, CRISC, CISM) are highly preferred.

For more information, please apply directly