> Markdown version of [/jobs/ext/2794006-head-of-technology-information-security-risk-2lod-13164](https://www.wearedevelopers.com/jobs/ext/2794006-head-of-technology-information-security-risk-2lod-13164). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Head of Technology & Information Security Risk (2LoD) (13164)

- **Company:** Investec
- **Location:** Greater London, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing, DevOps, Systems Development Life Cycle
- **Published:** September 8, 2026
- **Apply:** https://www.collegerecruiter.com/job/2852289759-head-of-technology--information-security-risk-2lod-13164

## About the Role

* Extensive experience in a financial institution or regulated environment with a strong track record in 2LoD technology risk management
 * Demonstrated ability to challenge 1LoD risk decisions and drive risk-based outcomes autonomously
 * Deep technical understanding of Cloud, APIs, DevOps, AI, and SDLC; knowledge of Azure/AWS/GCP is advantageous
 * Professional certifications such as CISSP, CRISC, CISA, CISM (or equivalent) are preferred
 * Excellent stakeholder management, communication, and influencing skills; proven ability to mentor and uplift teams
 * Strong analytical capability, risk assessment and governance experience, with a pragmatic, collaborative, and outcomes-driven mindset

As part of our collaborative & agile culture, our working week is 4 days in the office and one day remote. We believe that being together enables us to live our values and support our clients and communities in an extraordinary way.

## Description

Join Investec's IBP Operational Risk team as the Head of Technology & Information Security Risk (2LoD), where you'll lead the governance and ongoing evolution of our technology risk framework. You'll oversee risk across on-prem, cloud, and AI initiatives, ensuring secure, scalable, and cost-effective architectures that align with regulatory expectations and the Board's risk appetite. You'll partner with senior stakeholders across IT, security, audit, and business lines to embed risk discipline, drive improvements, and uplift the organisation's Tech Risk maturity and posture., * Define, govern and continuously improve the Technology & Information Security Risk framework for IBP, ensuring alignment with regulatory standards and the Board's risk appetite.

 * Lead independent risk assessments of technology systems (applications, infrastructure, third parties), including risk articulation, control effectiveness, residual risk, and follow-up actions.
 * Oversee risk reporting tailored to management and Board audiences, ensuring clear escalation pathways and governance
 * Provide guidance on risk events, ensuring timely, accurate business impact assessments and robust follow-up actions
 * Review third-party exit strategies and resiliency plans, evaluating their adequacy for potential disruptions
 * Track risk mitigation plans, ensure evidence of closure, and validate remediation only when fit for purpose
 * Monitor forward-looking risks and emerging themes to help the Technology community anticipate and respond to changes
 * Act as a trusted advisor to the broader community, promoting a strong risk culture and compliance with training initiatives
 * Collaboratewith Internal Audit and other risk functions to ensure audit readiness and consistent risk management practices


## Related Videos

- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment)
- [Inside Bitpanda's Tech Stack: Scaling a European Fintech Leader - Markus Dorner](https://www.wearedevelopers.com/videos/1979-inside-bitpanda-s-tech-stack-scaling-a-european-fintech-leader-markus-dorner)

## Related Articles

- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 196: AI Killed DevOps, LLM Political Bias & AI Security](https://www.wearedevelopers.com/magazine/659-dev-digest-196-ai-killed-devops-llm-political-bias-ai-security)