About this role
InfoSec and AI Governance (Second Line) Officer
London, Hybrid | Permanent
£Competitive salary, bonus and benefits
A leading global investment banking group has created a brand new Assistant Director role in its Group Risk function. This role will see you taking ownership of Information Security governance across the Group and play a central part in building the firm’s AI Management System, aligned to ISO/IEC 42001.
Within this role you’ll shape the function, set the standard and have real influence with senior people across Technology, Security, Data, Legal, Compliance and the business.
What you’ll be doing
- Owning the Group Information Security framework, policies and standards, and making them work in practice
- Challenging risk assessments, risk acceptances, incidents, control weaknesses and major technology projects
- Overseeing third party security risk, from due diligence through to security exceptions
- Joining up InfoSec and Data Governance, covering classification, handling, DLP and the data lifecycle
- Helping design, implement and run the AI Management System, turning ISO 42001 into practical policies, controls and processes
- Reviewing significant AI initiatives and getting the firm ready for independent assessment
- Writing clear, sharp risk reporting for senior governance forums
What you’ll bring
- Significant experience in InfoSec governance, risk management or second line technology risk, ideally in financial services or another regulated sector
- Hands-on experience writing and maintaining policies, standards and control frameworks (ISO 27001 and NIST)
- A track record of independent challenge within a Three Lines model, and the judgement to know when to push and when to support
- A good grasp of data security and data governance
- Some exposure to AI governance or AI risk, and a real appetite to become an expert in ISO 42001
- The confidence to challenge senior stakeholders constructively, and the writing skills to make your case clearly
Nice to have
- CISSP, CISM, CRISC, or ISO 27001 / ISO 42001 Lead Implementer or Lead Auditor
- Banking or asset management experience
- Hands-on experience implementing or assuring an ISMS or AIMS
Why this role
You’ll get the rare combination of an established InfoSec governance remit and a ground floor role in AI governance, at a firm that takes both seriously. It’s the kind of experience that will be in very high demand over the next few years.
You don’t need to be an AI specialist already. If you’re a strong second line InfoSec professional who’s curious about where AI governance is heading, we’d love to hear from you. And if you don’t tick every box, please still apply.
About cyber security & digital forensics roles for ex-police
Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.
See all cyber security & digital forensics jobs in London →Why this fits a police background — match score 87/100
- Intelligence & OSINT
- Risk & threat assessment
- Working to legislation & regulation
What cyber security & digital forensics roles pay ex-police
Advertised UK ranges, editorial estimates reviewed July 2026
| Digital forensics analyst | £32,000–£45,000 |
| DFIR consultant | £45,000–£65,000 |
| Senior forensics / IR specialist | £60,000–£80,000 |
| Threat-intelligence specialist | £55,000–£80,000 |