Job Search

We are seeking an experienced and strategic Head of Department, Cyber & Information Resilience to lead the development and delivery of a robust cyber security, information assurance and operational resilience capability. This is a senior leadership role, responsible for protecting critical services, information assets and technology environments while enabling the organisation to manage disruption, adapt to emerging threats and recover effectively.

You will set the strategic direction for cyber and information resilience, ensuring that policies, frameworks and controls align with regulatory obligations, recognised industry standards and organisational priorities. Leading a multidisciplinary team, you will oversee cyber risk management, security operations, incident response, business continuity, disaster recovery, information governance and resilience testing.

The role will require close collaboration with senior stakeholders across technology, risk, compliance, legal, procurement and operational teams. You will provide clear advice on material risks and investment priorities, report performance and assurance to executive and governance forums, and ensure that cyber security and resilience are embedded into strategic planning, projects, supplier management and day-to-day operations.

You will lead the response to significant cyber or operational incidents, co-ordinating investigation, containment, communication and recovery activity. You will also maintain effective relationships with external partners, regulators and relevant industry bodies, while promoting a culture of security awareness, accountability and continuous improvement.

We are looking for a confident and credible leader with substantial experience in cyber security, information resilience, risk management or a closely related discipline. You will have a strong understanding of security frameworks, threat management, incident response, business continuity, third-party risk and data protection. Experience of leading technical and non-technical teams, managing complex change and influencing at executive level is essential.

Relevant professional qualifications or equivalent practical experience are desirable, such as CISSP, CISM, CRISC, ISO 27001, CBCI or similar. You will combine sound judgement and analytical thinking with excellent communication skills, a collaborative approach and the ability to translate complex risks into clear, actionable recommendations.

We are seeking an experienced Head of Department, Cyber & Information Resilience to lead the development and delivery of a comprehensive cyber security, information resilience and operational continuity capability. This senior role will provide strategic direction across cyber risk management, information assurance, technology resilience, incident response and business continuity, ensuring that critical services, data and infrastructure remain secure and available in a constantly evolving threat landscape.

You will lead a multidisciplinary team and establish clear governance, policies, standards and assurance frameworks aligned with relevant regulatory obligations and recognised industry practices. Responsibilities will include identifying and managing cyber and information risks; overseeing vulnerability management, security monitoring and incident response; coordinating business continuity and disaster recovery planning; and ensuring that resilience requirements are embedded across programmes, suppliers, systems and operational processes. You will lead the response to significant cyber or information incidents, provide clear reporting to senior stakeholders, and drive continuous improvement through testing, lessons learned, metrics and assurance activity. The role will also involve managing budgets, developing capability, and building strong relationships with technical, operational, risk, compliance and executive teams.

Applicants should have substantial senior-level experience in cyber security, information resilience, technology risk, business continuity or a closely related discipline, together with a proven record of leading teams and delivering organisation-wide change. You will bring strong knowledge of cyber security principles, risk management, incident management, disaster recovery, regulatory expectations and relevant frameworks such as ISO 27001, ISO 22301 or NIST. Excellent communication, influencing and decision-making skills are essential, as is the ability to translate complex technical and risk issues into clear, practical advice for varied audiences. Professional qualifications in cyber security, information assurance, risk, resilience or related fields are desirable. A strategic outlook, calm approach under pressure, and commitment to developing a strong culture of security and resilience are key to success.

We are seeking an experienced and forward-thinking Head of Department, Cyber & Information Resilience to lead the development and delivery of a robust cyber security, information resilience and technology risk capability. This is a senior leadership role with responsibility for protecting critical services, information assets and operational environments against an evolving threat landscape. You will provide strategic direction, expert advice and effective oversight across cyber security, business continuity, disaster recovery, information assurance and operational resilience.

You will lead a multidisciplinary team, set clear priorities and ensure that security and resilience are embedded into organisational strategy, transformation programmes and day-to-day operations. Key responsibilities will include developing and maintaining cyber and information resilience strategies; overseeing risk assessments, security controls, incident response and recovery arrangements; establishing effective governance, policies and assurance frameworks; and ensuring compliance with relevant legislation, regulations, standards and industry best practice. You will also direct the management of major cyber incidents and resilience events, coordinating internal teams, suppliers and external partners where required. The role will involve reporting risk, performance and improvement plans to senior stakeholders and relevant governance committees, while promoting a strong culture of security awareness and continuous improvement.

Applicants should have substantial experience leading cyber security, information security, technology risk or organisational resilience functions in a complex environment. You will bring a strong understanding of cyber threats, risk management, identity and access management, incident management, disaster recovery, third-party assurance and data protection. Relevant professional qualifications or equivalent experience are desirable. You will be an accomplished people leader and communicator, able to influence at board and executive level, translate technical risks into clear business implications and build effective relationships across diverse stakeholder groups. A pragmatic, collaborative and outcome-focused approach is essential, together with the judgement and resilience needed to make sound decisions in a high-profile and rapidly changing environment.

We are seeking an experienced Head of Department, Cyber & Information Resilience to lead the development and delivery of a robust, organisation-wide approach to cybersecurity, information protection, operational resilience and business continuity. This senior role will provide strategic direction, assurance and expert advice to senior leadership, ensuring that critical services, information assets and technology environments remain secure, resilient and capable of withstanding evolving threats and disruption.

You will lead a multidisciplinary team and oversee the cybersecurity and information resilience framework, including governance, risk management, security architecture, identity and access management, vulnerability management, incident response, disaster recovery and continuity planning. You will establish effective policies, standards and controls, monitor compliance with relevant legislation and regulatory requirements, and maintain clear reporting on risk, resilience and control effectiveness. The role will also involve leading responses to significant cyber or operational incidents, coordinating exercises and testing, managing third-party and supply-chain risks, and promoting a strong culture of security and resilience across the organisation.

The successful candidate will bring substantial senior-level experience in cybersecurity, information assurance, operational resilience, business continuity or a closely related discipline. You will have a strong understanding of recognised security and resilience frameworks, risk-based governance, threat management and regulatory obligations, together with experience leading teams and influencing stakeholders at all levels. Excellent communication, judgement and crisis-management skills are essential, as is the ability to translate complex technical and security issues into clear business advice. Professional qualifications in cybersecurity, information security, risk, audit or business continuity are desirable. This is an opportunity to shape a mature resilience capability, strengthen organisational preparedness and make a visible contribution to the protection of essential services and information.