IT Security & Risk Governance Lead

Onyx-Conseil; Greater London; Hybrid; GBP 75,000 - 85,000; Full time

Job summary

Onyx-Conseil is seeking an IT Security Manager in Central London with 5–8 years of proven expertise. You will provide guidance to corporate functions to enhance information security maturity, lead risk governance, and collaborate with business units on security roadmaps.

The role involves chairing security groups, engaging third parties, and championing security by design. The position requires frequent in-office presence (3 days per week) in London, with a salary package described as £75K–£85K

Qualifications

• Experience in an information security risk leadership role within a large organisation.
• Confident in presenting, discussing and championing ideas and concepts with senior stakeholders.
• Experience of running information security risk governance processes and structures.
• Familiarity with relevant industry standards for information security (e.g. ISO27001, NIST CSF).
• Experience of creating, implementing and assessing against information security policies and standards.
• Ability to analyse complex, ambiguous problems and summarise clearly with a view to establishing practical solutions.
• Able to bridge the gap between technologists and business-people, bringing information security risks to the business with pragmatic outlook.
• Ability to prioritise security risks and controls, differentiating essential from nice-to-have.
• Able to communicate messages to maximise buy-in and understanding.
• Ability to manage budgets and understand business risks.

Responsibilities

• Provide advice, support and guidance to all Company Corporate functions to assist them to maintain and improve information security maturity.
• Work collaboratively with all areas of the Company Corporate and build networks to promote Information Security.
• Act as subject matter expert on IT Security, including legal and regulatory compliance.
• Advise Company Corporate functions on how to achieve the required controls and assist with solutions.
• Participate in Company BU’s Projects providing support, guidance, control validation and security assurance.
• Support and encourage security by design ethos; aid GRC to build mechanisms to assess compliance.
• Drive the development of BU/Divisional security roadmaps and oversee non-conformities feeding into the CISO roadmap.
• Coach, train and educate the Company IT and Functions to upskill and increase security maturity in BU’s.
• Be an active member of the IS Security community, sharing lessons learned from other BU’s.
• Produce, implement and standardise protocol and guidance material to support BU activities.
• Facilitate and chair security working group meetings; engage third party relationships; assist in procurement and tendering.
• Raising the security baseline controls and standardising where appropriate; understand different business requirements and align to objectives.
• Support Security operations to improve information security awareness across the group (phishing campaigns and reporting).
• Oversee information security incident management and security assessments and assurance activities.
• Manage third-party relationships and ensure regulatory/compliance reporting.

Job description

Onyx-Conseil is seeking an IT Security Manager in Central London with 5–8 years of proven expertise. You will provide guidance to corporate functions to enhance information security maturity, lead risk governance, and collaborate with business units on security roadmaps.

The role involves chairing security groups, engaging third parties, and championing security by design. The position requires frequent in-office presence (3 days per week) in London, with a salary package described as £75K–£85K