Head of security jobs in RochdaleCreate job alerts

Department: Claret Employment Type: Permanent Location: Bury St Edmunds Compensation: GBP 55,000 - GBP 65,000 / year You will be based at our Claret Head Office and be an integral part of our contract team responsible for Managing the end-to-end process for Civil activities, working with your team and closely working with the Operations Manager/Director to meet the needs of the client in the most cost-effective & safe manner. You will provide operational leadership and technical expertise and work within a team to deliver a first-class service to our clients delivering the programme safely, within budget and on time. You will be competent and have experience on working with large scale projects and able to engineer solutions on site and focus your teams on completing work right first time. You will provide operational leadership - ensuring that the work is delivered safely, on time, within budget and to our client's expectations. In addition to Health and Safety, customer service is critical to the client. • Managing and motivating a team, delegating where appropriate, but leading by example, challenging poor behaviour and taking pride in hitting the delivery targets., • Responsible for ensuring all work is completed right first time and to budget and is shut down accordingly., • Working with the contract team to ensure work is completed as planned and responsible for keeping the operations manager up to date and informed on any delays or any work that is ahead of programme., • Take ownership of our overall processes - think ahead, determine and implement efficient methods and safe systems of work., • Completing Health & Safety incident and damage reports as required carrying out any investigations and disciplinaries in relation to any poor behaviours., • Responsible for performance and driving continual improvements with the Operational teams, i.e. defect and root cause analysis., • To ensure that all the client and operational requirements are met in a professional and efficient manner., • To provide daily and weekly reports as required and to ensure that all service levels and KPI objectives are achieved., • Recruitment of staff and suppliers., • Ensuring that all Operatives have the correct training and competencies to work on the projects., • To provide a positive and innovative input into the team, through provision of solutions to problems and embracing change., • To ensure that safety issues are reported in line with Company procedures, • Coach and develop staff to reach their potential., • Monitor staff performance to specification and working instructions., • Ensure all Site Inspections are completed by your team as per the business programme requirement., • Encourage and ensure we maintain Close Call reporting Targets., • Liaising with and managing sub-contractors as required., • SMSTS, • Knowledge of CDM and Temporary Works, • NVQ level 6 or other relevant qualification, • IOSH managing safely, • Financial and commercial accountability, • Excellent communication skills, • Full UK Driving Licence We offer a competitive salary based on experience along with a full benefits package. Network Plus is proud to be an Equal Opportunity Employer. We celebrate diversity and do not discriminate based on race, religion, colour, nationality, sex, sexual orientation, age, veteran status, disability status, or any other applicable characteristics protected by law. We are Armed Forces-friendly. We welcome applications from ex-Armed Forces personnel, reservists, armed forces veterans, cadet instructors and military spouses/partners. We understand that privacy and the security of your personal information is extremely important. By applying for this role, you agree to the terms of our privacy policy. #J-18808-Ljbffr

The Head of Technology GRC is responsible for building, leading and continuously developing the Group Technology GRC function, translating the Technology Risk, Governance & Assurance strategy into effective services, processes, controls and assurance activity across the Group. The role provides a unique opportunity to shape and lead the long-term Technology GRC capability of one of the UK's largest retail technology estates, building on a significant transformation programme and establishing a sustainable second-line function operating across a complex multi-fascia environment. This is a leadership role with accountability for the performance, capability and day-to-day operation of the Technology GRC function and the transition from programme delivery to a sustainable long-term operating model. The role leads a multi-disciplinary team spanning technology risk, controls and assurance, policy and governance, compliance and third-party technology risk, ensuring the function operates as a coherent service with clear priorities, ownership, standards and measurable outcomes. The Head will lead the areas requiring senior GRC judgement and oversight while building team capability and delegating operational ownership appropriately. They will be responsible for ensuring GRC services are delivered consistently, that risks and control weaknesses receive effective challenge and escalation, and that the function continues to evolve as the Group's technology environment, operating model and risk profile mature. The function sits within Information Security for organisational purposes but operates as an independent second-line GRC function, providing objective challenge and assurance across the wider technology control environment. This includes controls relating to cyber security, ITGC, identity and access management, technology change, operations, resilience, third parties, data and emerging technologies. The role is central to the transition from transformation-led delivery to a sustainable, long-term operating model for Technology Risk, Governance & Assurance across the Group. The Head of Technology GRC will establish, operate and embed the services, frameworks, assurance processes, governance structures and capabilities required to support first-line ownership and provide effective second-line oversight across a complex multi-fascia technology estate. The Director of Technology Risk, Governance & Assurance retains accountability for the overall Technology Risk, Governance & Assurance strategy and the independent opinion provided to Executive leadership, the Audit & Risk Committee and external stakeholders. The Head of Technology GRC is accountable for the delivery, capability and operational effectiveness of the function. • Job Title – Head of Technology GRC, • Location – BL9 8RR, • Reports To – Director of Technology Risk, Governance & Assurance, • Direct Reports – Controls and Assurance Lead; Technology Risk Lead; Policy Lead, • Working rota – Monday-Friday, • Working hours – 40 Hours, • Lead and develop the Group Technology GRC function, providing clear direction, leadership and operational oversight across technology risk, controls and assurance, policy and governance, compliance and third-party technology risk., • Set and manage priorities across the GRC portfolio, balancing risk, regulatory requirements, assurance commitments, business demand and available capacity, and making clear trade-offs where demand exceeds capacity., • Set clear accountabilities and performance expectations for the GRC leadership team, ensuring each service has clear ownership, delivery measures, priorities and escalation routes, and holding Leads accountable for delivery and quality., • Translate the Technology Risk, Governance & Assurance strategy into an effective and sustainable operating model, services, processes and capabilities that are consistently applied across the Group., • Build and mature a high-performing second-line function that provides independent challenge, oversight and assurance across the technology control environment while maintaining clear separation from first-line operational responsibilities., • Establish and continuously improve the Technology GRC service catalogue, ensuring each service has defined scope, ownership, customers, outputs, measures and escalation routes., • Establish, maintain and continually improve the Group Technology Control Framework, ensuring control requirements remain proportionate, risk-based and aligned to business, regulatory and audit expectations., • Agree and lead the annual technology assurance programme with the Director of Technology Risk, Governance & Assurance, providing independent oversight of control effectiveness across ITGC, Provision 29, cyber security, identity and access management, technology change, operations, resilience, third-party technology risk, data and emerging technology domains., • Own the ongoing lifecycle of technology control deficiencies, ensuring issues are appropriately assessed, remediated, validated, risk accepted where necessary and ultimately closed in a controlled and auditable manner., • Embed Controls by Design and point-of-change governance across the technology lifecycle, ensuring risk, control and assurance requirements are considered before new technology, services or material changes are introduced., • Ensure GRC provides effective challenge and oversight without assuming first-line accountability for risk, controls, remediation or operational delivery., • Lead the operation and continuous improvement of technology risk management processes, ensuring technology risks are identified, assessed, reported and managed consistently across the Group., • Maintain a forward-looking view of technology risk, regulatory developments and emerging threats, translating these into practical control, governance and assurance requirements that support informed decision making., • Oversee the development and maintenance of technology risk, governance and information security policies, standards and methodologies, ensuring they remain aligned to organisational objectives, regulatory obligations and industry good practice., • Ensure effective governance structures, reporting and decision-making forums are established and maintained, providing clear visibility of technology risk, control performance, assurance outcomes and remediation progress., • Lead the GRC aspects of third-party technology risk management, including due diligence, supplier assurance, contractual control obligations, independent assurance reporting and remediation of identified gaps., • Oversee the effective operation and continuous development of the Group's GRC tooling estate, ensuring risk, control, issue, assurance and evidence data remains accurate, reliable and supports meaningful management reporting., • Develop and maintain effective relationships with Technology, Information Security, Finance, Internal Audit, Procurement, Legal and external assurance partners, ensuring clear accountability, constructive challenge and strong cross-functional collaboration., • Act as the senior operational contact for internal and external audit on Technology GRC matters, coordinating responses, evidence and follow-up while supporting the Director in senior stakeholder engagement and reliance activity., • Lead the transition of Technology GRC from transformation programme into a permanent Group capability, embedding governance, risk management, controls and assurance services across a complex multi-fascia technology estate., • Build organisational capability and awareness by promoting a strong culture of technology risk management, governance, accountability and continuous improvement across the Group., • Support the Director of Technology Risk, Governance & Assurance in providing Executive leadership, the Audit & Risk Committee, external auditors and other stakeholders with confidence in the effectiveness and maturity of the Group's technology control environment through a robust and independently operated second-line assurance capability., • Technology change is delivered safely and at pace, with effective risk assessment, Controls by Design and proportionate governance embedded before solutions enter production., • Technology risk decisions are evidence-based, transparent and defensible, with material risks and exceptions escalated through clear governance and informed decision-making., • First-line ownership of technology risks and controls is embedded across the Group, with clear accountability, timely execution and minimal dependency on GRC intervention., • A trusted, risk-based assurance programme provides confidence in the effectiveness of the technology control environment, supporting strong audit outcomes and timely remediation of identified weaknesses., • Technology risks arising from operational change, supplier dependencies, contractual commitments, ageing technology and emerging risks are identified early enough to support proactive business decisions., • Control monitoring, testing, evidence collection, workflow and attestation are increasingly automated, reducing administrative burden and enabling greater focus on judgement, challenge and risk management., • GRC data, tooling and AI provide reliable insight into risks, controls, issues and assurance outcomes, supporting informed Executive and Board decision-making., • The Technology GRC function operates as a sustainable, trusted and internally capable second-line function, providing confidence to Executive leadership, the Audit & Risk Committee and external auditors., • A pragmatic and outcome-focused leader who can balance strategic thinking with operational delivery., • Demonstrable experience building, developing and leading high-performing teams., • Strong judgement, credibility and resilience, with the confidence to provide constructive challenge where supported by evidence., • Ability to influence senior stakeholders, suppliers and control owners whilst maintaining independence and objectivity., • Comfortable operating in complex environments and translating ambiguity into clear priorities and outcomes., • Leads through ownership and accountability, taking responsibility for outcomes and driving issues through to resolution., • Comfortable moving between strategic discussions and detailed operational matters, knowing when to remain at altitude and when to become directly involved., • Demonstrates strong personal curiosity and a willingness to understand the detail behind risks, controls, findings and remediation activities., • Builds capability in others through coaching, mentoring and leading by example rather than creating dependency., • Identifies emerging issues early, escalates proportionately and acts before problems become audit findings, programme delays or operational incidents., • Operates with a high degree of autonomy, judgement and pragmatism, balancing governance discipline with commercial and operational realities., • Comfortable holding a position that may be unpopular where evidence, risk or control effectiveness supports that position., • Experience leading a Technology GRC, Technology Risk, IT Controls, Technology Assurance or IT Audit function within a complex organisation., • Strong understanding of technology risk, governance and controls, including ITGC and UK Corporate Governance Code Provision 29 requirements., • Experience designing and operating technology control frameworks and second-line testing and assurance programmes., • Experience embedding Controls by Design and integrating controls into technology delivery and change processes., • Experience managing technology control deficiencies through remediation, risk acceptance, validation and closure., • Experience operating GRC platforms and using risk, control and assurance data to support decision-making and reporting., • Experience of third-party technology risk and assurance, including interpretation of SOC reports and independent assurance outputs., • Experience applying relevant frameworks and regulatory requirements, including NIST, PCI DSS, data protection and emerging AI governance requirements., • Experience operating in multi-entity or multi-fascia environments where governance is established centrally and executed locally., • Relevant degree or equivalent professional experience, with certifications such as CISA, CRISC, CISM, CIA or CISSP desirable., • 10+ years of progressive experience in governance, risk, compliance, or audit, with at least 3 years in a Head of, leadership or equivalent role. #J-18808-Ljbffr

Get AI-powered advice on this job and more exclusive features. This range is provided by Alpine Fire Engineers Ltd. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more. Direct message the job poster from Alpine Fire Engineers Ltd Alpine Group (including Alpine Fire Engineers and DAS Fire) is a fast growing, award winning, leader in fire detection and suppression systems — designing, delivering and maintaining complex solutions across logistics & distribution, aerospace, automotive, pharmaceuticals, high hazard and other specialist environments. We’re proud to be recognised among The Sunday Times Best Places to Work (2025), reflecting our focus on wellbeing, values and a high performance, people first culture. Location: Bury (Greater Manchester) as the primary base, with occasional travel to other UK sites. The Opportunity: As we scale, we are strengthening our in‑house IT capability. This role will take responsibility for defining and delivering our IT roadmap — ensuring that our systems, data, and services keep pace with business growth and support a great colleague and client experience. You’ll manage the day‑to‑day IT operations (largely delivered by partners), oversee vendors, work with internal stakeholders to prioritise projects, and guide continuous improvement across infrastructure, applications, and security. This is a hands‑on, delivery‑focused role with direct visibility to the leadership team, ideal for someone who enjoys balancing strategy with execution. Core Responsibilities • Set & deliver the technology strategy, • Own the multi‑year IT roadmap aligned to business goals (growth, M&A, European expansion), covering applications (ERP), data & analytics, infrastructure & cloud, end user experience, and service excellence., • Translate business goals (growth, M&A, European expansion) into clear IT initiatives and delivery plans., • Track progress and communicate updates, risks, and investment needs to leadership. IT Operations & Service • Ensure IT services run smoothly and meet agreed SLAs, working closely with our IT & NetSuite Support Manager., • Coordinate MSPs and vendors to maintain uptime, connectivity, device lifecycle management, and user support., • Negotiate IT supplier contracts, SLAs and commercial terms that balance value, performance and risk., • Lead our security posture and drive ‘secure by design’ across identity, devices, data and SaaS applications., • Run risk management, change control, disaster recovery, incident response and supplier assurance. Applications & data • Partner with Finance and Operations to enhance NetSuite and adjacent SaaS platforms., • Support automation, integration, and reporting initiatives that improve efficiency and decision‑making., • Mature our Microsoft 365 stack and uplift device management, collaboration, and information protection., • Oversee connectivity, resilience, and the path to cloud first (where it adds value). Budgeting & value management • Build and manage the IT budget (opex/capex), forecast, and track ROI on change initiatives., • Continuously optimise cost‑to‑serve, licensing and operational efficiency. Change, training & communications • Ensure a great colleague experience with IT (clear SLAs, self‑service, knowledge, training)., • Lead change communications and occasional training for new tools and initiatives across the business., • Contribute to knowledge sharing and training to improve digital confidence across the business. Leadership • Line manage and grow the internal IT team — coach, mentor, set goals and foster a high trust, high standards culture. Out of hours • Rare, but from time‑to‑time critical activities may require work outside standard hours (e.g., incidents, projects). We plan to avoid it, and we recognise it when it occurs. What You’ll Bring: • Track record leading IT in a multi‑site, service/engineering or industrial setting at Head of IT / IT Manager / CTO level., • Strong hands on knowledge and experience across: Microsoft 365/Entra/Intune/Defender; enterprise networking; identity & access; endpoint security; device lifecycle; backup/DR., • Experience with ERP/NetSuite or similar enterprise SaaS; data integration/reporting; process automation., • Security & governance, vendor/commercial management, budgeting and Board engagement., • Strong communicator, able to translate technical issues into business language., • Exposure to industrial, engineering, or construction environments – strong project base., • Experience supporting technology change through business growth or acquisitions., • ITIL, PRINCE2/Agile, and relevant Microsoft/Security certifications. Working Pattern : • Hybrid: We offer flexibility in remote working; however, regular on‑site presence at Bury is essential to succeed in this role (team leadership, Board engagement, site collaboration)., • Travel: Occasional travel to UK sites and, in line with growth plans, periodic travel within Europe. Rewards & Benefits : • Competitive salary (c.£60k DOE) plus benefits., • Industry leading benefits package., • Hybrid working with meaningful flexibility, balanced with on‑site collaboration., • An award‑winning workplace with strong leadership and a supportive, values led culture. Reporting Line : • Reports into the CEO, • Direct line management of internal IT roles, including the IT & NetSuite Support Manager., • Mid‑Senior level, • Full‑time, • Information Technology, • Industries: Engineering Services, Engines and Power Transmission Equipment Manufacturing, and Design Services Referrals increase your chances of interviewing at Alpine Fire Engineers Ltd by 2x Get notified about new Head of Information Technology jobs in Bury, England, United Kingdom. #J-18808-Ljbffr

The Head of Technology GRC is responsible for building, leading and continuously developing the Group Technology GRC function, translating the Technology Risk, Governance & Assurance strategy into effective services, processes, controls and assurance activity across the Group. The role provides a unique opportunity to shape and lead the long-term Technology GRC capability of one of the UK's largest retail technology estates, building on a significant transformation programme and establishing a sustainable second-line function operating across a complex multi-fascia environment. This is a leadership role with accountability for the performance, capability and day-to-day operation of the Technology GRC function and the transition from programme delivery to a sustainable long-term operating model. The role leads a multi-disciplinary team spanning technology risk, controls and assurance, policy and governance, compliance and third-party technology risk, ensuring the function operates as a coherent service with clear priorities, ownership, standards and measurable outcomes. The Head will lead the areas requiring senior GRC judgement and oversight while building team capability and delegating operational ownership appropriately. They will be responsible for ensuring GRC services are delivered consistently, that risks and control weaknesses receive effective challenge and escalation, and that the function continues to evolve as the Group's technology environment, operating model and risk profile mature. The function sits within Information Security for organisational purposes but operates as an independent second-line GRC function, providing objective challenge and assurance across the wider technology control environment. This includes controls relating to cyber security, ITGC, identity and access management, technology change, operations, resilience, third parties, data and emerging technologies. The role is central to the transition from transformation-led delivery to a sustainable, long-term operating model for Technology Risk, Governance & Assurance across the Group. The Head of Technology GRC will establish, operate and embed the services, frameworks, assurance processes, governance structures and capabilities required to support first-line ownership and provide effective second-line oversight across a complex multi-fascia technology estate. The Director of Technology Risk, Governance & Assurance retains accountability for the overall Technology Risk, Governance & Assurance strategy and the independent opinion provided to Executive leadership, the Audit & Risk Committee and external stakeholders. The Head of Technology GRC is accountable for the delivery, capability and operational effectiveness of the function. • Job Title – Head of Technology GRC, • Location – BL9 8RR, • Reports To – Director of Technology Risk, Governance & Assurance, • Direct Reports – Controls and Assurance Lead; Technology Risk Lead; Policy Lead, • Working rota – Monday-Friday, • Working hours – 40 Hours, • Lead and develop the Group Technology GRC function, providing clear direction, leadership and operational oversight across technology risk, controls and assurance, policy and governance, compliance and third-party technology risk., • Set and manage priorities across the GRC portfolio, balancing risk, regulatory requirements, assurance commitments, business demand and available capacity, and making clear trade-offs where demand exceeds capacity., • Set clear accountabilities and performance expectations for the GRC leadership team, ensuring each service has clear ownership, delivery measures, priorities and escalation routes, and holding Leads accountable for delivery and quality., • Translate the Technology Risk, Governance & Assurance strategy into an effective and sustainable operating model, services, processes and capabilities that are consistently applied across the Group., • Build and mature a high-performing second-line function that provides independent challenge, oversight and assurance across the technology control environment while maintaining clear separation from first-line operational responsibilities., • Establish and continuously improve the Technology GRC service catalogue, ensuring each service has defined scope, ownership, customers, outputs, measures and escalation routes., • Establish, maintain and continually improve the Group Technology Control Framework, ensuring control requirements remain proportionate, risk-based and aligned to business, regulatory and audit expectations., • Agree and lead the annual technology assurance programme with the Director of Technology Risk, Governance & Assurance, providing independent oversight of control effectiveness across ITGC, Provision 29, cyber security, identity and access management, technology change, operations, resilience, third-party technology risk, data and emerging technology domains., • Own the ongoing lifecycle of technology control deficiencies, ensuring issues are appropriately assessed, remediated, validated, risk accepted where necessary and ultimately closed in a controlled and auditable manner., • Embed Controls by Design and point-of-change governance across the technology lifecycle, ensuring risk, control and assurance requirements are considered before new technology, services or material changes are introduced., • Ensure GRC provides effective challenge and oversight without assuming first-line accountability for risk, controls, remediation or operational delivery., • Lead the operation and continuous improvement of technology risk management processes, ensuring technology risks are identified, assessed, reported and managed consistently across the Group., • Maintain a forward-looking view of technology risk, regulatory developments and emerging threats, translating these into practical control, governance and assurance requirements that support informed decision making., • Oversee the development and maintenance of technology risk, governance and information security policies, standards and methodologies, ensuring they remain aligned to organisational objectives, regulatory obligations and industry good practice., • Ensure effective governance structures, reporting and decision-making forums are established and maintained, providing clear visibility of technology risk, control performance, assurance outcomes and remediation progress., • Lead the GRC aspects of third-party technology risk management, including due diligence, supplier assurance, contractual control obligations, independent assurance reporting and remediation of identified gaps., • Oversee the effective operation and continuous development of the Group's GRC tooling estate, ensuring risk, control, issue, assurance and evidence data remains accurate, reliable and supports meaningful management reporting., • Develop and maintain effective relationships with Technology, Information Security, Finance, Internal Audit, Procurement, Legal and external assurance partners, ensuring clear accountability, constructive challenge and strong cross-functional collaboration., • Act as the senior operational contact for internal and external audit on Technology GRC matters, coordinating responses, evidence and follow-up while supporting the Director in senior stakeholder engagement and reliance activity., • Lead the transition of Technology GRC from transformation programme into a permanent Group capability, embedding governance, risk management, controls and assurance services across a complex multi-fascia technology estate., • Build organisational capability and awareness by promoting a strong culture of technology risk management, governance, accountability and continuous improvement across the Group., • Support the Director of Technology Risk, Governance & Assurance in providing Executive leadership, the Audit & Risk Committee, external auditors and other stakeholders with confidence in the effectiveness and maturity of the Group's technology control environment through a robust and independently operated second-line assurance capability., • Technology change is delivered safely and at pace, with effective risk assessment, Controls by Design and proportionate governance embedded before solutions enter production., • Technology risk decisions are evidence-based, transparent and defensible, with material risks and exceptions escalated through clear governance and informed decision-making., • First-line ownership of technology risks and controls is embedded across the Group, with clear accountability, timely execution and minimal dependency on GRC intervention., • A trusted, risk-based assurance programme provides confidence in the effectiveness of the technology control environment, supporting strong audit outcomes and timely remediation of identified weaknesses., • Technology risks arising from operational change, supplier dependencies, contractual commitments, ageing technology and emerging risks are identified early enough to support proactive business decisions., • Control monitoring, testing, evidence collection, workflow and attestation are increasingly automated, reducing administrative burden and enabling greater focus on judgement, challenge and risk management., • GRC data, tooling and AI provide reliable insight into risks, controls, issues and assurance outcomes, supporting informed Executive and Board decision-making., • The Technology GRC function operates as a sustainable, trusted and internally capable second-line function, providing confidence to Executive leadership, the Audit & Risk Committee and external auditors., • A pragmatic and outcome-focused leader who can balance strategic thinking with operational delivery., • Demonstrable experience building, developing and leading high-performing teams., • Strong judgement, credibility and resilience, with the confidence to provide constructive challenge where supported by evidence., • Ability to influence senior stakeholders, suppliers and control owners whilst maintaining independence and objectivity., • Comfortable operating in complex environments and translating ambiguity into clear priorities and outcomes., • Leads through ownership and accountability, taking responsibility for outcomes and driving issues through to resolution., • Comfortable moving between strategic discussions and detailed operational matters, knowing when to remain at altitude and when to become directly involved., • Demonstrates strong personal curiosity and a willingness to understand the detail behind risks, controls, findings and remediation activities., • Builds capability in others through coaching, mentoring and leading by example rather than creating dependency., • Identifies emerging issues early, escalates proportionately and acts before problems become audit findings, programme delays or operational incidents., • Operates with a high degree of autonomy, judgement and pragmatism, balancing governance discipline with commercial and operational realities., • Comfortable holding a position that may be unpopular where evidence, risk or control effectiveness supports that position., • Experience leading a Technology GRC, Technology Risk, IT Controls, Technology Assurance or IT Audit function within a complex organisation., • Strong understanding of technology risk, governance and controls, including ITGC and UK Corporate Governance Code Provision 29 requirements., • Experience designing and operating technology control frameworks and second-line testing and assurance programmes., • Experience embedding Controls by Design and integrating controls into technology delivery and change processes., • Experience managing technology control deficiencies through remediation, risk acceptance, validation and closure., • Experience operating GRC platforms and using risk, control and assurance data to support decision-making and reporting., • Experience of third-party technology risk and assurance, including interpretation of SOC reports and independent assurance outputs., • Experience applying relevant frameworks and regulatory requirements, including NIST, PCI DSS, data protection and emerging AI governance requirements., • Experience operating in multi-entity or multi-fascia environments where governance is established centrally and executed locally., • Relevant degree or equivalent professional experience, with certifications such as CISA, CRISC, CISM, CIA or CISSP desirable., • 10+ years of progressive experience in governance, risk, compliance, or audit, with at least 3 years in a Head of, leadership or equivalent role. #J-18808-Ljbffr

JDSports is seeking a Head of Technology GRC to lead the Group's risk, governance and assurance function across the technology estate.You will shape a sustainable second-line capability, drive policies and controls, and partner with executive leadership to manage cyber security, ITGC and third-party

Department: Group Technology Reports to: Director of Service Management & DevOps Location: JD Sports Fashion PLC, Balmoral House, Hollinsbrook Way, Pilsworth, Bury, BL9 8RR JD Group is a leading global omnichannel retailer, bringing together some of the world's most recognised sports fashion and outdoor brands. Technology is central to how we operate, innovate and deliver exceptional experiences for our customers across our global business. We are investing in the future of our technology landscape and have created an exciting new leadership opportunity for a Head of Infrastructure & Cloud Services to bring together Core Infrastructure, Cloud, Networks and Database Services into one integrated, high-performing capability. This is an opportunity to shape the strategy, performance and future direction of JD Group's Infrastructure & Cloud Services across the UK and EU. As Head of Infrastructure & Cloud Services, you will provide strategic and operational leadership across a complex, business-critical technology estate, ensuring our platforms are secure, resilient, reliable and ready to support the continued growth of our business. Working through functional leaders, internal teams and strategic service partners, you will bring together multiple technical capabilities under a shared vision, with clear accountability, a joined-up roadmap and a strong focus on service excellence. You will balance operational stability with meaningful transformation, driving modernisation, automation, AI-enabled operations, risk reduction and cost efficiency. You will also play a key role in translating Technology strategy into practical delivery plans, ensuring infrastructure and cloud investment creates measurable value for the wider business. This role is ideal for an experienced technology leader who can combine broad technical understanding with strong people leadership, commercial awareness and the ability to deliver change at scale. • Lead the strategy, operational management and transformation of Core Infrastructure, Cloud, Networks and Database Services as one integrated capability., • Develop and deliver a multi-year transformation roadmap that balances service stability, risk reduction, modernisation, business priorities and measurable outcomes., • Lead and empower functional leaders, establishing clear ownership, accountability and shared objectives across all infrastructure and cloud disciplines., • Simplify and modernise the hybrid technology estate across people, processes and tooling, prioritising business value, security, resilience and cost effectiveness., • Translate Group Technology strategy into an integrated Infrastructure & Cloud Services roadmap, aligned with Enterprise Architecture, Cyber Security and wider technology standards., • Identify opportunities to introduce emerging technologies, AI-enabled operations and automation to improve operational insight, service quality, resilience and efficiency., • Own the operational health and performance of the infrastructure and cloud estate, ensuring services are secure, reliable, scalable, performant and recoverable., • Establish and maintain effective resilience, business continuity and Disaster Recovery capabilities, supported by regular testing and continuous improvement., • Drive proactive management of vulnerabilities, patching, technical debt, technology lifecycle risks, end-of-life and end-of-support exposure, control gaps and audit actions., • Ensure operational risks are identified, assessed and remediated in line with agreed Cyber Security, risk management and control standards., • Embed consistent service management practices, performance measures and governance across internal teams and external partners., • Maintain a strong focus on continuous improvement, operational effectiveness and the quality of services delivered to the business., • Build an integrated leadership culture that encourages collaboration, shared accountability, continuous learning and high performance., • Develop functional leaders and teams, providing clear direction, supporting professional growth and building the capabilities needed for future technology demands., • Lead delivery through a blended operating model of internal teams, strategic partners and outsourced service providers., • Establish clear expectations, performance measures and governance for service partners, holding them accountable for service quality, resilience, security and delivery commitments., • Build effective working relationships across Technology, Enterprise Architecture, Cyber Security, Risk, Finance and business functions., • Own budget stewardship, commercial performance and value delivery across infrastructure, cloud and outsourced services., • Work closely with FinOps to improve cloud cost transparency, reporting, forecasting and optimisation, while owning the platform and supplier decisions that drive measurable efficiencies., • Identify opportunities to optimise technology investment, simplify the estate and improve the balance between cost, performance, resilience and risk., • Develop clear business cases and investment recommendations, communicating costs, benefits, risks and trade-offs to support informed decisions., • Monitor service performance, supplier commitments and transformation benefits to ensure investments deliver tangible business outcomes., • Act as a trusted senior technology leader, providing clear direction and expert guidance on infrastructure and cloud strategy, operational performance and transformation., • Translate complex technical issues, risks and investment choices into clear options and recommendations for technical and non-technical stakeholders., • Work collaboratively across the wider Technology function to ensure infrastructure and cloud services support business strategy, architectural principles, security requirements and future growth., • Build confidence in technology decisions through transparent communication, evidence-based recommendations and a clear focus on business outcomes., • Infrastructure leadership: Proven experience leading both the operation and transformation of a complex, business-critical infrastructure estate spanning Cloud, Networks and Database Services., • Leadership at scale: A strong track record of leading multidisciplinary technical teams through functional leaders, creating alignment and accountability across different areas of expertise., • Transformation delivery: Experience modernising large, distributed and highly available technology environments while maintaining operational stability and service continuity., • Cloud and hybrid platforms: Broad experience across cloud and hybrid infrastructure, including AWS, Azure and/or GCP, alongside network modernisation and enterprise database services., • Operational resilience: Strong experience in infrastructure security, vulnerability management, patching, technology lifecycle management, Disaster Recovery, recoverability and service resilience., • Risk and governance: Experience managing technology risk, audit and control remediation, technical debt and end-of-life or end-of-support exposure within established governance frameworks., • Partner and supplier management: Experience leading blended delivery models involving internal teams, strategic technology partners and outsourced service providers., • Commercial acumen: Strong financial and commercial management skills, including budget ownership, supplier performance, cost optimisation and demonstrable value delivery., • Technical credibility: Broad senior-level understanding of compute, storage, virtualisation, cloud platforms, networking, databases and resilience, with the ability to make informed decisions across disciplines., • Stakeholder engagement: Excellent communication and relationship-building skills, with the ability to influence senior stakeholders and collaborate effective across technical and business teams. You will bring a strategic, collaborative and outcome-focused approach to leadership, combining the ability to see the bigger picture with a clear understanding of operational detail. You will be comfortable navigating complexity, balancing competing priorities and making informed decisions within established Technology, Architecture, Cyber Security, Risk and investment frameworks. Above all, you will be motivated by the opportunity to build an integrated infrastructure and cloud capability that enables business growth, strengthens resilience, improves efficiency and creates lasting value for JD Group. Join JD Group and help shape the future of our Infrastructure & Cloud Services. #J-18808-Ljbffr

The Head of Physical and Personnel Security is the senior specialist lead for physical and personnel security within DVSA, responsible for leading the development, implementation and assurance of protective security arrangements across physical security, personnel security, vetting and related resil

JDSports is seeking a Head of Technology GRC to lead the Group's risk, governance and assurance function across the technology estate.You will shape a sustainable second-line capability, drive policies and controls, and partner with executive leadership to manage cyber security, ITGC and third-party

Driver and Vehicle Standards Agency (DVSA) is seeking a strategic Head of Physical and Personnel Security to lead protective security across physical security, personnel security, vetting and resilience. As the senior specialist, you will guide governance discussions, advise the Executive Team on ri

JD Sports Fashion is seeking a high-impact Head of Infrastructure & Cloud Services to lead a united team spanning Core Infrastructure, Cloud, Networks and Databases. You will shape strategy, drive modernisation and ensure security, resilience and cost efficiency across the UK and EU. You will balance operational stability with strategic change, collaborating with senior stakeholders and partners to deliver measurable value. #J-18808-Ljbffr

Head of IT Security or Chief Information Security Officer (CISO). Minimum of 35 hours per week, working a minimum of 40% across each month in the Territorial Headquarters, London, SE5 8FJ. Have understanding on how to keep abreast of any current and emerging cyber security threats is a critical part

A leading recruitment agency is seeking a Head of Cyber GRC. This senior role involves overseeing IT security compliance strategies, ensuring adherence to global regulatory standards, and leading a dedicated team. Located in West Midlands, this position offers high influence and strategic ownership.

Digital Gurus in Manchester is seeking a Head of Platform to lead its software engineering function through rapid growth. You’ll manage a team of 6–7 engineers across the UK and US, shape the platform roadmap, ensure resilience and security, and guide AI tooling adoption with a bias toward quali

A leading non-profit organization in the UK seeks a Head of IT Security to protect information assets and implement strategic cyber security measures. The position requires strong leadership and an understanding of cyber security frameworks. This senior role will involve leading a new security team

The Head of Physical and Personnel Security is the senior specialist lead for physical and personnel security within DVSA, responsible for leading the development, implementation and assurance of protective security arrangements across physical security, personnel security, vetting and related resil

Proven experience as a Head of Cyber Security, Cyber Security Manager, or Senior Security Leader. We're working with a global manufacturing organisation seeking a Head of Cyber Security to lead and mature their cyber security function. Strong background within Microsoft environments (Azure, Microsof

A good move for an Infrastructure/Security Lead who’s ready to move into a Head of role, take ownership, and shape strategy while staying close to the tech. Strong grounding in infrastructure and security — ideally having moved from networking/cloud into security. Progression: Step into a Head o

Reporting to the COO, have the autonomy to select tools, design processes, and shape the culture of technology and security at Bioptimus. Proven ability to automate IT operations, from employee onboarding to security monitoring and response, reducing manual overhead and improving reliability. Backed

Get notified about new Head of Information Security jobs in. I've partnered with a FTSE 100 organisation in their search for a Head of Cyber (GRC). This is a brand new role, and it plays a big part of their continued focus on security, compliance, and risk maturity.

A leading data integration platform in Manchester is seeking an Infrastructure Security Engineering Manager to lead cloud security initiatives and ensure the safety of AI infrastructure. This role combines technical leadership with hands-on security implementation in a dynamic environment. Candidate

We’re looking for a hands‑on Interim Head of Cyber Security to lead and enhance our client’s cyber security capability. Lead the deployment and optimisation of technologies including Darktrace, Microsoft Defender, and Fortinet. Strong knowledge of Darktrace, Microsoft Defender, and Fortinet to

Work closely with Heads of Infrastructure and Heads of Programmes, influencing secure design, delivery and change across the organisation. Evidence of balancing hands‑on technical understanding with ownership of broader security strategy and vision. Head of Information and Cyber Security.

A leading non-profit organization in the UK seeks a Cyber Security Lead to oversee the protection of digital systems against cyber threats. The position is full-time and offers flexibility in working arrangements. This role includes maintaining cyber risk registers, leading incident responses, and e

Head of Cyber Security at Morson Edge is a 3-6 month contract in Manchester, Inside IR35, requiring leadership to mature the cyber security function across a global manufacturing organisation. You will own cyber strategy, risk management, and security operations while engaging senior stakeholders an

The role offers the chance to step into a Head of position with competitive pay and additional benefits. A multi-industry business in Surrey is seeking an ambitious Infrastructure/Security Lead to lead a growing team and drive a major transformation. You will oversee implementation and vulnerability

Covering both strategy and day-to-day security, the work includes setting our cyber security approach, overseeing security operations and responding to significant incidents. The Head of Cyber Security has an important role in protecting our digital services, cloud platforms, systems and sensitive d

The role blends strategy with hands-on work on vulnerabilities, security controls and secure service design, with hybrid working and around 40% of the week in the Manchester or London office. The Head of Cyber Security post at the Public Service Ombudsman secures the organisation's digital estate, c

Clear Legal & Financial Recruitment is seeking an experienced Head of IT to own the organisation's IT infrastructure, Microsoft 365 environment, and security. You will lead the internal IT function, manage external technology providers, and drive automation and improvements across systems to ensure

A recruitment agency is seeking a hands-on Interim Head of Cyber Security for a contract role in the United Kingdom. This position involves assessing and enhancing the cyber security capability of the client, leading incident response, and optimizing security technologies. The ideal candidate has se

Evidence of continuing professional development within security monitoring, leadership or operational management. As a business committed to operational excellence and client satisfaction, we are investing in the continued development of our internal infrastructure, including the professional leader

The Head of Physical Security & Resilience is responsible for the Physical Security specialism across Estates, anticipating challenges, providing strategic direction, driving performance and building the capability required to ensure the security of HMRC’s assets (staff, information, estate) and a

Covering both strategy and day-to-day security, the work includes setting our cyber security approach, overseeing security operations and responding to significant incidents. You will split your time between working from home and spending around 40% of your week in our Manchester or London office, w

As the Head of Information Security for the UK and International business you will report into the global CISO and also dotted line into the Director of Technology for UK&I and will be accountable for all aspects of Information Security in the UK&I business. You will work as part of the global secur

DWP Digital with Purpose is seeking a Head of Secure Design to lead cyber security, fraud risk and secure design across Working Age Services. You’ll provide strategic oversight for experts across pen-testers, security architects, DevSecOps and compliance, guiding risk management across large-scale

National Highways is recruiting a Lead SOC Manager to direct the Security Operations Centre, coordinate incident response, vulnerability management and threat intelligence across IT, OT, personnel and physical security. The hybrid role requires two days in the office weekly and may be based at any N

A growing FinTech SaaS provider in the UK is looking for a Head of DevSecOps to lead their security strategy and technical team. This strategic role involves mentoring engineers, embedding security practices, and overseeing cloud security initiatives. The position is fully remote with flexibility, o

The role provides dedicated ownership of cyber risk, security architecture, incident readiness, supplier security and continuous improvement, ensuring cyber security priorities are translated into clear business outcomes, measurable risk reduction and effective protection of Matalan's customers, col

We are seeking an experienced information security leader to take ownership of a software-driven organization’s security strategy and strengthen its overall security posture. At least 7 years of professional experience in Information Security, Security Engineering, or a closely related field. Our