> Markdown version of [/jobs/ext/4086255-uk-head-of-it-risk-compliance](https://www.wearedevelopers.com/jobs/ext/4086255-uk-head-of-it-risk-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# UK Head of IT Risk & Compliance

- **Company:** Priory
- **Location:** Stoke Gifford, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Security Management System, Information Technology
- **Published:** October 29, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=8d213249fa5b88ff

## About the Role

You'll be an experienced IT risk and compliance professional with a strong understanding of information security, regulatory requirements and risk management frameworks. You'll combine strategic thinking with practical experience, bringing the ability to influence senior stakeholders, improve governance and embed effective risk management across a complex organisation.
We're looking for someone with:

 * Risk and compliance experience: Significant experience in IT risk, compliance or audit roles, with a proven ability to develop and deliver information security or governance strategies.
 * Information security expertise: Strong knowledge of information security frameworks and regulatory standards, including ISO 27001, NIST, Cyber Essentials and GDPR.
 * ISMS management: Hands-on experience implementing, managing and continuously improving an Information Security Management System.
 * Risk management: Experience conducting IT risk assessments, identifying compliance gaps and developing effective mitigation plans.
 * Audit and assurance: Experience planning and delivering internal and external audits, managing compliance assessments and reporting on findings.
 * Technical understanding: A good understanding of IT infrastructure, cybersecurity and technology environments, with the ability to assess associated risks.
 * Stakeholder management: Experience working with senior leaders, technical teams and external partners, translating complex security and compliance requirements into practical business actions.

You'll also bring strong communication, organisational and analytical skills, with the confidence to challenge existing processes and influence decision-making. A recognised qualification in risk management, compliance, audit or a related field, or a willingness to work towards one, is important.
Experience working within a regulated industry, particularly healthcare, would be advantageous, alongside an understanding of healthcare-specific information security requirements.
This position is a leadership role at Priory and during the interview process we will be assessing candidates against our leadership behaviours. These are a set of ten values driven behaviours that define great leadership at Priory. They are integral to driving a positive high performing culture where we strive to deliver the best care and outcomes for the people we support. You can find out more about our interview approach and our leadership behaviours here.

## Description

We are recruiting a UK Head of IT Risk & Compliance to join our IT Senior Leadership Team in Bristol. This is a newly created role, offering the opportunity to shape and lead our UK information security strategy, strengthening how we manage IT risk, governance and compliance across the business.
Reporting directly to our UK Chief Information Officer, you'll take ownership of our UK information security approach, ensuring our systems, data and technology services are secure and meet regulatory requirements. You'll work closely with senior stakeholders and our Group Chief Information Security Officer to strengthen our security controls, improve risk management and contribute to our wider Group information security strategy.

This is a hybrid role with at least 2 days per week required in the Bristol office., * Information security strategy: Develop and deliver our UK information security strategy, ensuring alignment with Group policies, regulatory requirements and business priorities.

 * Risk management: Oversee the identification, assessment and management of IT risks, maintaining effective risk registers and driving improvements to reduce exposure.
 * Governance and compliance: Lead the development and continuous improvement of our ISMS, ensuring alignment with ISO 27001, Cyber Essentials and relevant healthcare regulatory requirements.
 * Audit and assurance: Lead internal and external IT security audits, coordinating compliance assessments, certifications and improvement plans.
 * Third-party risk: Oversee IT supplier risk assessments, due diligence and ongoing assurance, ensuring third-party systems and services meet our security requirements.

You'll also lead our response to significant information security incidents, working closely with IT, Legal and other business teams to manage risks and drive improvements. As a senior leader, you'll provide guidance on information security matters, oversee the UK IT Risk & Compliance budget and report on our security and compliance position to senior stakeholders.