Information Security Risk Officer

We are seeking a 3 year+ experienced Information Security Risk Officer to join our second line of defence, providing independent oversight, challenge, and assurance of information security practices across the organisation. This role is critical in ensuring that information security risks are effectively identified, assessed, managed, and reported in alignment with regulatory requirements, ISO/IEC 27001 standards, and our enterprise risk management framework.
Reporting to the Group Head of Information Security, you will play a key role in evaluating the design and operational effectiveness of controls that safeguard our information systems and data. You will provide objective, risk-based assurance and contribute to continuous improvement across security governance, incident management, risk management, and compliance activities.

Working closely with stakeholders across IT, Risk, Legal, and Operations, you will help embed security into business processes and projects from the outset, ensuring a consistent and resilient approach to information protection.

This is a hands-on, business-facing role, ideal for someone who is passionate about enabling teams to operate securely while supporting the organisation’s ability to move with agility and confidence. You’ll thrive in a dynamic environment where pragmatic risk management and proactive engagement are key to driving secure business outcomes