Connecting to LinkedIn...

Connecting to LinkedIn...


Head of IT Risk

Job Title: Head of IT Risk
Contract Type: Permanent
Location: United Kingdom,City of London
Salary: £75000 - £85000 per annum
Start Date: ASAP
REF: AG44_26391
Contact Name: Ana Gaffney
Contact Email:
Job Published: about 2 years ago

Job Description

Montash are currently working with a multinational financial services organisation that is in need of a Head of IT Risk. This individual will be heavily involved with key stakeholders within the organisation in addition to 3rd parties, so previous exposure to stakeholders is a must. The Head of IT Risk will have a large impact on the organisation's information security strategy, therefore technical knowledge and background in information risk is essential.


  • Engaging and building strong relationships with senior stakeholders within the organisation and gaining support in relation to risk management activities.
  • Delivering a pragmatic IT Risk management strategy that aligns with business objectives.
  • Developing and updating the risk management framework, processes and governance.
  • Implementing a Governance, Risk and Compliance tool (Archer).
  • Driving improvement within IT governance, risk and compliance.
  • Assessing the adequacy of information security policies and remediation activities.
  • Coordinating and managing risk assessments and ensuring compliance with ISO 27001.
  • Leading a team of information security experts.


Key skills:

  • 5+ years' experience within a global company.
  • Broad Information Security knowledge and highly experienced within IT Risk.
  • Having delivered an ISMS against ISO 27001 and experience with a range of IT Risk frameworks including COBIT or ITIL.
  • Excellent communication and negotiation skills.
  • Previous exposure to key decision makers within organisations.
  • Leadership and extensive managerial experience.
  • Experience with GRC tools.
  • University degree, preferably in Information Security or Computer Science.
  • CISSP/ CISA/ CISM/ CRISC or similar certifications.

Social Stream

Latest News


SAP announces partnership with STC

2016-10-25 10:00:00 +0100

One of the world’s leading providers of enterprise resource planning (ERP) solutions, SAP, has revealed that it is partnering with STC Advanced Solutions to offer both private and public sector organisations more empowerment. The two firms will be working alongside one another to provide cloud-based subscription services to firms of all sizes. This will help to deliver better information communication technology (ICT) across the Kingdom of Saudi Arabia....


Humans remain largest security flaw in cloud ...

2016-10-21 14:00:00 +0100

With a vast number of companies moving some, if not all, of their operations to the cloud, security continues to be of major concern. Whilst there are numerous patches and firewalls to safeguard defences, it has been highlighted that the most difficult area to protect against is human interaction. This is the view of Jamie Woodruff, a penetration tester and ethical hacker. Woodruff’s views come after he was contracted to conduct a penetration test in or...