Information Security Governance, Risk and Assurance Lead

UK Research and Innovation

. Lead the effectiveness, coherence and continuing development of UKRI’s enterprise security governance, risk and assurance framework .

Posted 10/22/2026full-timeSwindon • United KingdomSenior💰 £46,743 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading information security governance, risk, and assurance frameworks, with a strong focus on NIST CSF, ISO 27001, and the Government Cyber Assessment Framework. Capable of producing authoritative, evidence-based assessments of security risk and control effectiveness for senior governance audiences.

Highest-signal resume keywords

Information Security GovernanceRisk ManagementNIST CSFISO 27001Enterprise Security Assurance Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Risk AssessmentControl Design EvaluationEvidence-Based ReportingRemediation TrackingTrend Analysis

Soft Skills

LeadershipInfluenceAnalytical SkillsCommunication

Certifications & Qualifications

Security Check ClearanceBaseline Personnel Security Screening

Industry Keywords

GovernanceAssurance FrameworkFederated EnvironmentCybersecurityAccountability

About the role

Key responsibilities & impact

Lead the effectiveness, coherence and continuing development of UKRI’s enterprise security governance, risk and assurance framework
Provide independent challenge and oversight of security risk, control design and control effectiveness
Set enterprise assurance approaches, standards and evidence expectations aligned with organisational risk and NIST CSF, ISO 27001 and the Government Cyber Assessment Framework
Ensure risk-based, proportionate and consistent assurance coverage across UKRI’s federated environment
Challenge risk and control owners, require proportionate remediation, track delivery to closure and escalate material concerns through senior governance routes
Provide an evidence-based enterprise view of security risk, control effectiveness, assurance gaps and remediation status to the CIO, CISO and governance forums
Drive transparency, comparability and accountability through assurance measures, trend analysis and decision-quality reporting
Influence the future security operating model by embedding sustainable governance and assurance arrangements
Collaborate with engineers, researchers, technologists and federated Digital, Data and Technology teams
Participate in a selection interview involving competency-based questions and a presentation

Requirements

What you’ll need

Candidates must be eligible for clearance in line with UK National vetting guidelines and willing to undertake the process
Security Check clearance is required
Substantial experience leading information security governance, risk and assurance in a complex or federated organisation
Proven experience establishing and improving enterprise security assurance frameworks across complex technology and supplier environments
Experience providing independent challenge to senior risk and control owners while preserving their accountability
Experience assessing control design and effectiveness using technical, procedural and audit evidence
Experience setting proportionate remediation expectations, tracking delivery and escalating material concerns through senior governance routes
Strong knowledge and proportionate application of NIST CSF, ISO 27001 and the Government Cyber Assessment Framework
Ability to produce and communicate an authoritative, evidence-based view of enterprise security risk and control effectiveness for CIO, CISO and governance audiences
Strong leadership, influence and analytical skills
Ability to drive consistency across organisational boundaries and make sound decisions where evidence is incomplete or contested
CV and personal statement required for application
Personal statement must provide examples against the essential criteria and be no more than 1000 words
Willingness to undergo Baseline Personnel Security Screening, which is a pre-condition of employment

Benefits

Comp & perks

An outstanding defined benefit pension scheme
30 days' annual leave in addition to 10.5 public and privilege days (full time equivalent)
Employee discounts and offers on retail and leisure activities
Employee assistance programme, providing confidential help and advice
Flexible working options
Compressed hours and flexible working patterns available
Salary sacrifice cycle to work scheme
Wellbeing initiatives
Reasonable accommodation for candidates with disabilities
UKRI may reimburse some or all Home Office sponsorship fees after employment, subject to discussion