Information Security Governance, Risk and Assurance Lead

The Information Security Governance, Risk and Assurance Lead at UKRI is responsible for establishing and sustaining an effective enterprise security assurance framework, providing independent challenge and oversight of security risk, and delivering evidence-based views on security risk and control effectiveness to senior leadership. This role involves driving a consistent, risk-based assurance approach across a federated environment while ensuring accountability remains with local service, risk, and control owners. The position requires strong leadership, analytical skills, and expertise in frameworks like NIST CSF, ISO 27001, and the Government Cyber Assessment Framework to support secure delivery of strategic objectives.