InfoSec & Governance Lead — Insurance Sector

Incite-Insight.co.uk; Greater London; On-site; GBP 72,000 - 88,000; Full time

Job summary

Incite-Insight.co.uk in London is seeking an Information Security & Governance Lead to establish and maintain the organisation’s information security framework, governance and cyber risk management capabilities.

This is a practical individual contributor role with no direct reports, requiring hands-on ability to translate requirements into workable controls, guidance and evidence, while coordinating with colleagues and external providers.

Qualifications

• Proven experience in information security, cyber security, technology risk or governance.
• Strong knowledge of ISO 27001, NIST, CIS Controls and Cyber Essentials.
• Experience with risk management, audit support and regulatory compliance.
• Understanding of cloud security, identity management and third‑party risk.
• Experience supporting vulnerability management, penetration testing and incident responses.
• Ability to influence colleagues and suppliers and communicate security requirements clearly.

Responsibilities

• Develop, maintain and improve the information security framework, policies, standards and procedures.
• Ensure security controls are implemented and evidenced across technology services and suppliers.
• Own the technology risk register, facilitate risk assessments and track risk treatment plans.
• Oversee vulnerability management, coordinate penetration testing and monitor remediation.
• Support security incident management and post‑incident reviews.
• Coordinate audits, assurance reviews and regulatory requests.
• Support compliance with FCA, UK GDPR, ICO expectations and internal standards.
• Conduct supplier security due diligence and ongoing assurance reviews.
• Support security in procurement and contract reviews.
• Contribute to operational resilience and control testing.
• Develop security awareness activities and advise project teams.

Skills

Information security

Cyber security

Technology risk

Governance

Regulatory compliance

Vendor risk

Education

CISSP

CISM

Job description

Incite-Insight.co.uk in London is seeking an Information Security & Governance Lead to establish and maintain the organisation’s information security framework, governance and cyber risk management capabilities.

This is a practical individual contributor role with no direct reports, requiring hands-on ability to translate requirements into workable controls, guidance and evidence, while coordinating with colleagues and external providers.