> Markdown version of [/jobs/ext/2794007-head-of-it-risk](https://www.wearedevelopers.com/jobs/ext/2794007-head-of-it-risk). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Head of IT Risk

- **Company:** Morson Group
- **Location:** Manchester, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Software Vulnerability Management
- **Published:** September 8, 2026
- **Apply:** https://www.collegerecruiter.com/job/2842866645-head-of-it-risk

## About the Role

* Significant experience in information security, cyber security, or IT risk leadership roles
 * Experience working within financial services or other regulated industries
 * Strong understanding of cyber security frameworks, technology risk management, and operational resilience
 * Experience leading security strategy, governance, and security operationsProven ability to engage and influence senior stakeholders across technology and risk functions
 * Leadership experience managing high-performing security or technology risk teams

## Description

This is a senior leadership role responsible for shaping and delivering the organisation's information security strategy, ensuring robust protection of systems, data, and operations while embedding strong technology risk governance across the business.

You will work closely with senior stakeholders across technology, risk, and the wider business, providing strategic oversight of cyber security, operational resilience, and IT risk management., * Define and deliver the organisation's information security and IT risk strategy

 * Lead and develop a team of information security and technology risk specialists
 * Oversee cyber security operations, including security tooling, incident response, and vulnerability management
 * Maintain and manage the IT risk framework and risk register
 * Ensure alignment with regulatory requirements and industry frameworks (e.g. ISO 27001, NIST, DORA)
 * Partner with senior leadership to embed security and risk awareness across the organisation
 * Provide regular reporting to executive stakeholders on security posture and technology risk


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [What is the real price of one successful line of code?](https://www.wearedevelopers.com/videos/1921-what-is-the-real-price-of-one-successful-line-of-code)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [From developer to manager – what does it take to become an engineering manager?](https://www.wearedevelopers.com/magazine/42-from-developer-to-manager-what-does-it-take-to-become-an-engineering-manager)