Information Security Risk Manager

Information Security Risk Manager – External Assurance | London (Hybrid) | Up to £120k + Bonus

La Fosse has partnered with a leading financial services organisation that is seeking an experienced Information Security Risk Manager to take ownership of its external assurance programme.

Operating within a modern, cloud-native environment, the firm relies on a complex third-party ecosystem to deliver its services. This role will focus on managing assurance activities across strategic technology partners, ensuring services are secure, integrated effectively, and aligned with best practices.

This is a strategic opportunity for someone with strong stakeholder engagement skills, technical understanding, and a background in managing vendor or third-party risk.

What they’re looking for

• Experience in a security risk or BISO-style role within a cloud-heavy or tech-led organisation

• Strong knowledge of third-party security, external assurance frameworks, and risk management principles

• Ability to collaborate with internal teams and external vendors to drive mutual security improvements

• Technical understanding of SaaS platforms, APIs, and modern authentication/encryption techniques

• Experience conducting thematic security reviews and contributing to incident response planning

• Familiarity with security frameworks such as NIST CSF 2 (advantageous)

• Clear and confident communication style, with the ability to influence senior stakeholders

This is a hybrid role based in London. Candidates must have the current right to work in the UK. The salary is up to £120,000, plus bonus and benefits.

If you would like to find out more, please apply.