Head of Information Security & IT Risk

Flexible Location | Hybrid working with frequent travel to Banbury required.

You’ve spent years building your credibility in information security. You’ve configured the tools, handled the incidents, built the controls and managed the risk register. And then you stepped into leadership. Owning the function, guiding the strategy and taking accountability. Now you’re ready for the next version of that. Not just running security, shaping it.

The role: You’ve been there and done it before… led the function, owned and taken accountability for it. The team is in place, the foundations are there. But the strategy and roadmap? That’s yours to shape. You will own the function.

What you’ll be doing: You’ll conduct a full security and risk analysis. Understanding what’s working, what isn’t, where we’re exposed, where we’re strong and then build and implement the strategy to elevate us. You’ll:

• Lead and develop the Information Security & IT Risk team
• Define and deliver the information security and IT risk strategy
• Own the IT risk register and action plans
• Oversee security operations and assurance activities
• Lead incident response and maturity improvement
• Embed governance aligned to appropriate frameworks and regulatory requirements that works in the real world
• Update and influence executive stakeholders
• Modernise the function alongside exciting digital transformation initiatives

We’re embracing new technologies and AI, investing in digital platforms, therefore security needs to be an enabler, not a blocker. That’s where you come in.

What you’ll bring: You’re not just experienced, you’re credible. You’ve spent 10–15 years in information security and IT risk, ideally in regulated environments leading teams, owning budgets and presenting to executive stakeholders. But importantly, you understand how things work. You’ve been hands‑on in your past and know what good looks like technically. When someone talks about zero‑trust architecture, penetration testing, SIEM tuning, operational resilience or vulnerability remediation, you don’t just nod, you understand. Now, you lead through that experience. You’ve led change before and built or reshaped a function. You know how to assess maturity, prioritise risk and execute improvements. And you’re ready to do it again, somewhere investing in the future.

The good stuff: Performance bonus (up to 30%) and car allowance (£7192.50), private healthcare for you and your family, company pension scheme, flexible benefits (gym membership, tech, health assessments and more), access to an online wellbeing centre, discounts with a wide range of retailers, 30 days’ holiday plus bank holidays, increasing with service, with buy/sell options, electric vehicle / plug‑in hybrid vehicle scheme.

About Bibby Financial Services: We’re a global organisation operating in nine countries, supporting over 9,000 SMEs worldwide. Following the completion of a £1bn securitisation deal, we’re increasing our lending to UK businesses at a time when support really matters and this role plays a vital part in making that happen. If you’ve led before and you’re ready to shape something with real backing, real ambition and real investment in technology apply before 2nd April 2026. Early applications are encouraged, as the role may close sooner. Everyone will receive a response. Bibby Financial Services is committed to creating an inclusive workplace. If you require any adjustments during the recruitment process, please let us know.