> Markdown version of [/jobs/ext/2909709-interim-head-of-technology-risk](https://www.wearedevelopers.com/jobs/ext/2909709-interim-head-of-technology-risk). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Interim Head of Technology Risk - **Company:** Broadgate - **Location:** UK - **Experience:** Expert - **Contract:** Contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, IT Management - **Published:** September 15, 2026 - **Apply:** https://www.collegerecruiter.com/job/2879227642-interim-head-of-technology-risk ## About the Role * Senior leadership experience across multiple organisations, with a genuine ability to build and develop high-performing teams. * A track record leading risk, assurance or quality functions in complex technology environments - designing controls, monitoring and high-quality reporting frameworks that work in practice. * Deep expertise in technology and information security risk: risk assessment, control design, governance frameworks and cyber resilience. * Significant experience in highly regulated sectors, including oversight of technology and digital regulatory obligations for consumer-facing products and services. * The presence to influence senior executives, technical leaders and cross-functional teams - a clear, confident, persuasive communicator in the room and on the page. * Resilience under pressure, with the composure to bring stability and confidence to teams through high-stakes situations. Technical experience: * Designing, implementing and embedding enterprise-level risk and control frameworks aligned to organisational and regulatory requirements. * Building and directing assurance programmes end to end - planning, execution, reporting and remediation across complex technology estates. * Strong grounding in IT governance principles and established methodologies (e.g. COBIT, ITIL, NIST) applied at scale. * Hands-on experience with quantitative risk methodologies such as FAIR, and the ability to turn quantitative insight into strategic prioritisation. * Solid awareness of CISO-level governance frameworks and security control standards - policies, baselines and operational controls. Certifications: Relevant professional certification in technology risk or IT control assurance is highly desirable - for example CISM, CISSP, CRISC, CISA, CCSK or CCAK. ## Description This is a rare opportunity to shape how technology, cyber and information security risk is understood and managed across a complex, multi-jurisdiction business. You'll act as a trusted advisor to the Chief Risk & Compliance Officer and senior executives, providing credible challenge and forward-looking insight that directly informs Board-level decisions and strategic investment. If you're a technology risk leader who can operate confidently across the Three Lines of Defence, influence at the most senior level, and stay composed when it matters most, this one's worth a look. What you'll do: * Provide risk assurance and strategic advisory on technology, cloud, information assets and cyber security to the Group CRO, Board and relevant committees. * Lead and evolve the Group's Technology & Information Security GRC strategy, driving consistent adoption across every entity. * Set enterprise-wide policy and standards that meet regulatory requirements for technology, information security and digital resilience across the UK, Europe and the USA. * Own the second-line view on emerging technology roadmaps, ensuring alignment with Group strategy and competitive positioning. * Act as senior leadership liaison for the Group's Crisis Management Plan and cyber resilience strategy - including accountability for the cyber insurance mandate. * Serve as the primary point of contact with UK and European regulators on technology risk, digital resilience and information security. * Lead governance for technology and security change programmes, including oversight of cyber incidents, coordination of response, and support for recovery - with clear senior management reporting throughout. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [We adopted DevOps and are Cloud-native, Now What?](https://www.wearedevelopers.com/videos/485-we-adopted-devops-and-are-cloud-native-now-what) - [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [Best Companies to Work For in The UK: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/186-best-companies-to-work-for-in-the-uk-top-25-companies-in-2023) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)