Senior Information Security & Data Governance Lead

eFinancialCareers Ltd.; Aberdeen City; On-site; GBP 90,000 - 140,000; Full time

Job summary

eFinancialCareers Ltd. invites applications for an Information Security & Data Governance Lead (UK) to shape and govern our information security, data governance, and regulatory compliance across multiple jurisdictions.

You will develop policies aligned with ISO 27001, NIST CSF, CIS Controls, conduct risk assessments across IT, OT, and cloud, and lead audit activities. This senior individual contributor role requires deep GRC expertise and strong stakeholder engagement.

Qualifications

• Significant experience in information security, cybersecurity GRC, or IT governance roles.
• Proven experience implementing data governance frameworks.
• Strong understanding of international data protection and cybersecurity regulations.

Responsibilities

• Develop, implement, and maintain information and cyber security policies, standards, and procedures.
• Align with ISO 27001, NIST CSF, CIS Controls.
• Conduct risk assessments across IT, cloud, and OT environments.
• Support incident response planning and continuous improvement of security controls.
• Embed secure-by-design principles into infrastructure and operational systems.
• Establish and maintain an enterprise data governance framework.
• Define and enforce data classification, handling, retention, and protection standards.
• Ensure compliance with GDPR, UK Data Protection Act, and applicable US privacy laws.
• Lead and support internal and external audit activities, including evidence collection and remediation tracking.
• Maintain enterprise risk registers and compliance reporting.
• Continuously monitor global cyber and data regulatory changes.

Skills

Info sec

GRC

IT governance

Tools

ServiceNow GRC

RSA Archer

MetricStream

Job description

eFinancialCareers Ltd. invites applications for an Information Security & Data Governance Lead (UK) to shape and govern our information security, data governance, and regulatory compliance across multiple jurisdictions.

You will develop policies aligned with ISO 27001, NIST CSF, CIS Controls, conduct risk assessments across IT, OT, and cloud, and lead audit activities. This senior individual contributor role requires deep GRC expertise and strong stakeholder engagement.