InfoSec & Governance Lead — Risk, Compliance & Resilience

Incite Insight; Greater London; On-site; GBP 72,000 - 88,000; Full time

Job summary

Jobsoid Inc. is seeking an Information Security & Governance Lead to establish and maintain the organisation's security framework and governance capabilities in the London area.

This hands-on role requires translating security requirements into practical controls and evidence, with close collaboration with internal teams and external providers. The successful candidate will drive risk assessments, oversee vulnerability management, and coordinate audits to ensure FCA, UK GDPR and Consumer Duty

Qualifications

• Proven experience in information security, cyber security, technology risk or governance.
• Strong knowledge of ISO 27001, NIST, CIS Controls and Cyber Essentials.
• Experience of risk management, audit support and regulatory compliance.
• Understanding of cloud security, identity management and third-party risk.
• Experience supporting vulnerability management, penetration testing and incident response.
• Ability to influence colleagues and suppliers and communicate security requirements clearly.
• Practical approach balancing security, commercial and operational needs.

Responsibilities

• Develop and maintain information security framework, policies, standards and procedures.
• Ensure security controls evidenced across technology services and suppliers.
• Own risk register, facilitate risk assessments and track treatment plans.
• Oversee vulnerability management, coordinate testing and remediation.
• Support security incident management and post-incident reviews.
• Coordinate audits, assurance reviews and regulatory requests.
• Support FCA, GDPR, ICO regulatory compliance and governance standards.
• Conduct supplier security due diligence and ongoing assurance reviews.
• Assist procurement from security and governance perspective.
• Contribute to operational resilience and control testing.
• Develop security awareness activities for project and operations teams.

Skills

Information security

Cyber security

Technology risk

Governance

Cloud security

Identity management

Third-party risk

Vulnerability management

Penetration testing

Incident response

Risk management

Audit support

Regulatory compliance

Stakeholder influence

Security certifications

Education

CISSP

CISM

Job description

Jobsoid Inc. is seeking an Information Security & Governance Lead to establish and maintain the organisation's security framework and governance capabilities in the London area.

This hands-on role requires translating security requirements into practical controls and evidence, with close collaboration with internal teams and external providers. The successful candidate will drive risk assessments, oversee vulnerability management, and coordinate audits to ensure FCA, UK GDPR and Consumer Duty