Head of Governance, Risk and Compliance

Salary: £76,000 - 94,000 per year

Requirements:

• We want experience in information security governance, risk and compliance.
• We want a professional security qualification such as CISSP, CISM or equivalent experience.
• We want strong knowledge of security control frameworks and risk management practices.
• We want knowledge of cyber and information risk frameworks or methodologies such as FAIR, or equivalent.
• We want experience developing, maintaining or assuring security standards, policies, control frameworks or risk management artefacts.
• We want understanding of MoD and other UK government security policy and frameworks.
• We want experience working in a regulated, defence, aerospace, critical national infrastructure or similarly complex environment.
• We want practical understanding of security risk assessment, residual risk, risk acceptance and non-compliance management.
• We want experience supporting audit, assurance, control testing or compliance reporting activity.
• We want the ability to work with technical and non-technical stakeholders to ensure security requirements are understood and appropriately evidenced.
• We want experience producing governance, risk or assurance reporting for senior stakeholders.
• Knowledge of security governance tooling, automation, dashboards or data-led reporting would be beneficial.

Responsibilities:

• We will lead the Information Security Governance, Risk and Compliance function.
• We will own and maintain UK Information Security standards, assurance arrangements and governance processes.
• We will help ensure security controls, risk decisions and assurance activity are understood, evidenced and reported consistently across the business.
• We will work with delivery teams, system owners, senior risk owners and security specialists to support proportionate security governance through the system lifecycle.
• We will oversee assurance activity, including reviews and audits against agreed security plans and controls.
• We will support continual improvement of the Information Security Operating Model, including better tooling, automation and data-led reporting.
• We will deputise for the Head of Information Security when required, including representing the function in senior forums and supporting wider team leadership.

Technologies:

• Support
• Security

More:

We are Leonardo UK, a global leader in Aerospace, Defence and Security, operating in a complex security, regulatory and defence environment. This is a permanent, full-time Head of Governance, Risk and Compliance role within our Information Security team, with hybrid working supported where appropriate and travel between our UK sites may be required. We offer a comprehensive, company-funded benefits package designed to support wellbeing, career development and work-life balance, including generous leave with flexi-days, an award-winning pension scheme, mental health and financial wellbeing support, bonus eligibility for management level and below, access to learning platforms, a referral programme and flexible benefits. We are committed to inclusion, accessibility and diversity, and we employ over 53,000 people worldwide, including 8,500 across 9 UK sites.

last updated 34 week of 2026