> Markdown version of [/jobs/ext/1535152-head-of-information-governance-risk-and-compliance](https://www.wearedevelopers.com/jobs/ext/1535152-head-of-information-governance-risk-and-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of Information Governance, Risk and Compliance - **Company:** National Services Scotland - **Location:** Glasgow, UK - **Experience:** Expert - **Salary:** £76,888.0 - £82,251.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Digital Technology - **Published:** July 6, 2026 - **Apply:** https://apply.jobs.scot.nhs.uk/DecideInternalExternal/DecideInternalExternal?JobId=262930 ## About the Role * Leading, developing, and line managing multi-disciplinary teams, enabling their staff to excel in their areas of expertise. * Chairing and contributing to boards and decisioning bodies, and providing concise updates on the subject matter that are suitable to satisfy assurance requirements at executive leadership level. * Effectively influencing decisioning processes across the organisation. When promoting a robust approach to security and compliance requirements, they have a high tolerance of different attitudes to I-GRC, and can confidently navigate political situations with complex stakeholderships. They will be a self-driven, credible and confident leader who has demonstrated excellent stakeholder engagement, and who can manage and prioritise conflicting demands on limited resourcing. Their expertise will be evidenced by an extensive track record in the field, knowledge of the regulatory environment, as well as continual professional development. The post requires a combination of strategic thinking and operational discipline, founded in strong judgement, personal resilience, and a values-driven approach that aligns with NSS's priorities. ## Description As part of this transformation, NSS and NES have joined to form a new organisation: Public Services Delivery Scotland (PSD Scotland). This new organisation will play a pivotal role in supporting the renewal and ensuring the long-term sustainability of health and care services across Scotland. About the Organisation: PSD Scotland unites expertise from NES and NSS in a way that will allow us to accelerate national programmes to support the NHS to deliver better care, now and in the future. We support staff with education and training, provide the tools and data that improve services, and run vital national functions such as procurement, logistics and blood, tissue and cell services., The Information Governance, Risk and Compliance (I-GRC) team forms part of DaS's Information Security & Governance pillar (IS&G). It provides GRC support and oversight for digital services across all NSS directorates; leads on NSS's statutory information security audits; facilitates DaS's wider approach to risk management; and plays a pivotal role in NHSScotland's wider IG landscape, both through engagement with national forums, and through provision and administration of associated tooling to other Health Boards., We seek to appoint a Head of I-GRC, taking responsibility for the I-GRC function and forming part of IS&G's senior management team. They will lead a high-performing and well-established team of experts, driving continued operational excellence and ensuring adherence to information security standards across the directorate and the organisation, both through providing excellent services and through proactive and collaborative engagement at all leadership levels. The post holder will be required to quickly build a comprehensive picture of the information risk landscape across the organisation and engage with key personnel within DaS and other directorates to understand and prioritise current key challenges in the area. They will independently lead improvement activities, including policy and framework development, which ensure that stakeholders across the organisation can make informed decisions cognisant of and compatible with NSS's risk appetite. The Head of I-GRC will foster the team's close partnership with IS&G's Security Consultancy team, supporting information assurance and documentation processes for digital systems, and ensuring they are fit for purpose and align with the organisation's security assurance and wider auditing requirements. The successful candidate will be expected to influence and shape Information Governance processes at all organisational levels and engage with the wider IG community to define and promote national approaches to the subject matter. ## Related Videos - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [Opening Keynote: Civic Coding, A Framework for Democratic Tech](https://www.wearedevelopers.com/videos/963-opening-keynote-civic-coding-a-framework-for-democratic-tech) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Introducing the W3C Web Sustainability Guidelines](https://www.wearedevelopers.com/videos/991-introducing-the-w3c-web-sustainability-guidelines) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Building Security Champions](https://www.wearedevelopers.com/magazine/87-building-security-champions) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)