Expire in: a month
Location: London (onsite 2 days per week)
Duration: 6 months
Rate: Inside IR35, rate to be discussed
Are you an experienced Head of Information Security Governance, Risk and Compliance looking for your next opportunity to make an impact within an evolving and fast paced environment? Do you have strong experience of leading 3rd party security assurance processes? If so, apply now.
We are seeking an experienced Head of InfoSec GRC & Awareness to lead governance, risk, compliance, and security awareness initiatives across an organisation at a time of significant modernisation. This pivotal role ensures a robust security posture by developing and enforcing policies, standards, and training programmes aligned with business objectives and regulatory requirements.
The key responsibilities of the Head of Information Security GRC & Awareness are:
Lead the development and enforcement of enterprise-wide information security policies and standards.
Drive security governance and cyber maturity through compliance, assurance reviews, and gap analysis.
Oversee the Information Security Risk Management process
Conducting in depth supplier due diligence / third party assurance processes
Manage audit readiness and support internal/external audit activities.
Own and deliver the organisation's security awareness programme, including campaigns and tailored training.
Depending on the candidate, you would also be involved in developing and implementing an Operational Technology (OT) Security Assurance Framework.
The successful candidate will have the following skills, experience and qualifications:
Professional certifications such as CISSP, CISM, ISO27001 Lead Auditor, CLAS etc
Extensive experience in information security or IT governance within large, complex environments.
Strong knowledge of security frameworks (ISO/IEC 27001, NIST CSF, CIS Controls, Cyber Essentials).
Proven track record in risk management, policy development, and security awareness initiatives.
Excellent communication, leadership, and influencing skills.
Very strong experience of driving 3rd party due diligence
Any experience of driving Technical Assurance, Operational Technology (OT) Security Assurance and Penetration Testing would be a bonus
This is an excellent opportunity to lead a critical function within a dynamic organisation, ensuring security resilience and cultural change across the enterprise.
The rate is competitive and we can discuss this directly. For further information, please apply and I will be in touch.
Head of InfoSec GRC & Awareness
Head of Information Security Governance, Risk and ComplianceDo not include the following in your job application, CV, or cover letter:
You should not be asked for payment or irrelevant information. If you have concerns about a job advert or employer, seek guidance on how to proceed.
Looking for your next career move? Join a top company hiring Head of Information Security GRC & Awareness job near me in London! This is your chance to work on exciting projects, grow professionally, and enjoy a rewarding career with competitive pay and excellent benefits. Whether you're an experienced professional or looking to take the next step, this role offers the perfect opportunity to enhance your skills and make an impact. Don’t miss out—apply today via Vita CV and take your career to the next level!
© Vita CV: Registered in England and Wales (16187919).
Vita CV uses cookies to enhance your experience, analyze site traffic, and personalize content. By continuing to browse, you agree to our use of cookies.