Incite-Insight.co.uk
Information Security & Governance Lead - £80k
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Salary: £80,000 per annum
Location: London
Reports to: Head of IT Services
The opportunity
An opportunity to work in the Insurance sector working for a Blue Chip employer as an Information Security & Governance Lead.
You will establish and maintain the organisation’s information security framework, technology governance and cyber risk management capabilities. Working closely with colleagues and external service providers, you will ensure security controls are effective, risks are managed and regulatory requirements are supported.
This is a practical individual contributor role with no direct reports. It suits someone who combines strong security and governance knowledge with the ability to turn requirements into workable controls, clear guidance and reliable evidence.
Key responsibilities
- Develop, maintain and improve the information security framework, policies, standards and procedures.
- Ensure security controls are implemented and evidenced across technology services and suppliers.
- Own the technology risk register, facilitate risk assessments and track risk treatment plans.
- Oversee vulnerability management, coordinate penetration testing and monitor remediation.
- Support security incident management and post-incident reviews.
- Coordinate responses to audits, assurance reviews and regulatory requests.
- Support compliance with FCA requirements, UK GDPR, ICO expectations and internal governance standards.
- Conduct supplier security due diligence and ongoing assurance reviews.
- Support procurement and contract reviews from a security and governance perspective.
- Contribute to operational resilience and control testing.
- Develop security awareness activities and advise project and operational teams.
- Ensure information is handled, stored and retained securely, with customer outcomes and Consumer Duty considerations reflected in decisions.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
About You
You will bring:
- Proven experience in information security, cyber security, technology risk or governance.
- Strong knowledge of ISO 27001, NIST, CIS Controls and Cyber Essentials.
- Experience of risk management, audit support and regulatory compliance.
- An understanding of cloud security, identity management and third-party risk.
- Experience supporting vulnerability management, penetration testing and incident response.
- The ability to influence colleagues and suppliers and communicate security requirements clearly.
- A practical approach to balancing security, commercial and operational needs.
Financial services experience is important, with insurance or insurance broker experience particularly relevant. CISSP, CISM or an equivalent qualification would be desirable.
Apply
Please submit your CV, highlighting your relevant information security, governance and regulated-sector experience.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location