Head of Governance Risk and Compliance

## Head of Governance Risk and Compliance Apply locations:
Wokingham, RG41 5BN
:
Warwick, CV34 6DA
time type:
Full time posted on:
Posted Yesterday time left to apply:
End Date:
July 28, 2026 (12 days left to apply) job requisition :
JR100595
** About the Role
** The Head of Governance, Risk & Compliance is a senior leadership role within NESO's Security function, reporting directly to the Chief Information Security Officer (CISO).This role is responsible for developing, implementing and continually enhancing NESO's security governance framework, threat-led cyber risk management framework and assurance strategy across one of the UK's most critical national infrastructure organisations.

This is a strategic role that requires close working with Executive stakeholders, the CIO leadership team, Enterprise Risk Management, Internal Audit, regulators and industry partners to ensure cyber and physical security risks are effectively understood, governed and managed in line with NESO's risk appetite and regulatory obligations.

The successful candidate will play a pivotal role in embedding a proactive risk culture, strengthening regulatory confidence, and ensuring security is integrated into NESO's digital, operational and business transformation agenda.
* his role is designated as requiring a National Security Vetting (NSV) clearance. The level of clearance associated with this role (SC) will usually need you to have been a resident in the UK for the last five years to apply. We would invite any applicants who do not currently meet this residency requirement to still express an interest in the role.
** This role can be based from Wokingham or Warwick and we continue to offer hybrid working from office and home.
*** Key Accountabilities
**** Governance & Strategy
*** Lead the development and continual evolution of NESO's Security Governance Framework, ensuring alignment with organisational strategy, risk appetite and regulatory obligations.
* Develop and maintain security policies, standards, control frameworks and governance processes across cyber, technology and operational environments.
* Act as a strategic advisor to the CISO on governance, risk and assurance matters.
** Threat-Led Risk Management
*** Develop and operate NESO's enterprise cyber risk management framework, aligned to NIS Regulations, and external standards such as CAF, ISO 27001, and enterprise risk management processes.
* Drive a threat-informed approach to risk identification, assessment, prioritisation and treatment.
* Establish clear risk ownership and accountability across the organisation.
* Lead development of Board and Executive Committee cyber risk reporting.
* Provide independent challenge and assurance to major technology and business programmes.
** Compliance & Assurance
*** Develop and implement a comprehensive cyber assurance strategy covering technology, operational environments, third parties and critical suppliers.
* Lead NESO's compliance activities relating to NIS Regulations, CAF, ISO
27001 and other applicable regulatory obligations.
* Manage relationships with regulators, auditors and external assurance providers.
* Establish metrics and reporting that provide meaningful insight into control effectiveness and organisational resilience.
** Secure by Design & Transformation
*** Ensure governance, risk and assurance activities support NESO's digital, data, AI and technology transformation agenda.
* Embed secure-by-design and risk-based decision-making into technology delivery, cloud adoption and Dev Sec Ops  practices.
* Provide strategic oversight and challenge to major change programmes.
* Provide governance, risk and assurance oversight for emerging technologies, including Artificial Intelligence (AI), ensuring their adoption aligns with NESO’s risk appetite, regulatory obligations and security requirements
** Leadership & Culture
*** Lead and develop a high-performing Governance, Risk & Compliance function.
* Foster a proactive security culture that promotes accountability, transparency and continuous improvement.
* Build strong relationships across operational, technology and business teams to drive shared ownership of risk.  Applicants must have…