Head of CIO Risk, Governance & Audit
Posted Updated
Description
Salary: up to £130K + annual bonus & benefits
Work Level: 3
Location: Edinburgh, Glasgow, Newcastle, London, Welwyn Garden City or Reigate, Permanent
Office Attendance: Our hybrid working model gives you the best of both worlds - flexibility to work from home and valuable face-to-face time with colleagues. This role typically requires 2-3 days per week onsite.
Closing Date: applications close on 27/11/2026 at 5pm.
The role
We're recruiting a Head of CIO Risk, Governance & Audit at Tesco Insurance and Money Services. You'll lead and manage the CIO Risk, Governance, and Audit responsibilities, supporting Technology, Operational Resilience, Supplier, Cyber, Data, Business Operational Resilience, AI and Change functions to operate and maintain effective risk management, robust IT governance, and comprehensive internal and external audit oversight.
As part of the CIO senior leadership team, this role will work closely with senior stakeholders, executive and Board members, second line risk functions, internal and external audit teams and the UK financial services regulators. It requires a deep understanding of regulatory risk frameworks within financial services, experience of working with the PRA & FCA, as well as broad knowledge of technology related risk and controls. You will also need a clear understanding of data and AI governance, risk and assurance. You’ll be responsible for building CIO wider risk communities, developing an open and transparent risk culture across all teams and the oversight and management of direct reports and matrix managed colleagues across multiple UK locations.
What you’ll be doing
• Driving the identification, assessment, and mitigation of technology-related risks, overseeing the implementation of governance structures and adherence to the IMS wide Risk Management Framework.
• Ensuring that internal and external audit activities are strong and transparent, provide assurance over IT controls, regulatory compliance, and strategic technology initiatives.
• Setting and leading the CIO Risk, Governance and Audit agenda including contributing to data and AI governance frameworks, translating enterprise strategy into a clear operating model for the function; articulating how risk, control and governance enable delivery of organisational priorities.
• Driving leadership alignment and foster a culture of accountability, control, and continuous improvement.
• Owning compliance with all relevant regulatory, legal, and internal policy
requirements across the CIO function; embedding robust control frameworks.
• Establishing and maturing enterprise-wide risk, governance, and control capabilities within CIO.
• Owning the end-to-end technology risk management framework.
• Charing various CIO and wider governance forums including representing CIO at Enterprise and Board Risk Committees.
What we’re looking for (minimum criteria)
• Deep experience operating within senior risk and compliance roles within a technology function of a sizeable UK based financial services organisation (ideally insurance).
• Strong blend of strategic oversight, regulatory awareness, and operational control excellence.
• Experience of owning and presenting items to senior stakeholders including Board and Regulatory representatives.
• Ability to communicate complex risk and governance matters with clarity and authority.
• Experience of interpreting strategy and policy to set and deliver objectives.
• Ability to operate as a senior influencer, driving alignment and consensus across competing priorities.
• Experience defining, implementing, and continuously improving governance structures, policies, and control frameworks.
• Experience providing expert leadership in audit and assurance, overseeing internal and external audit activity, control testing, and remediation.
• Leading teams of risk experts and, as part of the CIO leadership team, contributing to all areas of technology, data, AI, innovation and change agendas.
And if you have any of these, even better
• Applies expertise to act as the organisational authority on managing information throughout its lifecycle by designing and executing appropriate architectures, policies, and practices.
• Knowledge of AI and data governance within heavily regulated industries.
We welcome applications from everyone. If you’re excited about this role but your experience doesn’t align perfectly with every requirement, we’d still love to hear from you.
What’s in it for you?
• A generous pension, with up to 15% employer contribution, depending on what you put in.
• Private Medical Insurance, health screening (every 2 years) and virtual GP Service for you and your family.
• Critical illness insurance
• Performance related annual bonus.
• Car allowance or interest free car loan.
• 7.2 weeks holiday, with the opportunity to buy more.
• Colleague Clubcard discount (10-15% + second card to share with someone else).
• Enhanced parental leave.
• Opportunities to Save and Buy as you earn.
• A place to get on - take advantage of our ongoing learning opportunities to help you achieve the job and career you want.
Interview info:
As a Disability Confident Employer (Level 2), we’re committed to creating an accessible and supportive environment for all. We offer reasonable adjustments throughout the recruitment process, including interviews, to ensure every candidate has a fair opportunity to succeed.
We also know the importance of balancing work with life’s other commitments. Please talk to us at interview about the flexibility you need, as we’re committed to exploring part time and flexible working opportunities, at every level of the organisation.
Interviews are expected to be held after closing date.