Job Search

We are seeking an experienced Head of Information Security to lead the development and execution of a comprehensive security strategy across the organisation. This is a senior leadership role responsible for protecting information assets, technology platforms, and business operations while enabling secure growth and innovation. You will provide clear direction on information security, cyber risk, governance, and resilience, working closely with executive stakeholders and technology leaders to ensure security is embedded into business decision-making.

Key responsibilities will include defining and maintaining the information security strategy, policies, standards, and operating model; overseeing risk assessment and treatment; and ensuring compliance with relevant legal, regulatory, and industry requirements. You will lead security monitoring, incident response, vulnerability management, identity and access management, security architecture, and third-party risk oversight. The role will also involve developing business continuity and disaster recovery capabilities, coordinating responses to significant security incidents, and providing regular risk reporting and assurance to senior leadership. You will manage security budgets, suppliers, and specialist teams, while promoting a strong culture of security awareness throughout the organisation.

The successful candidate will have substantial experience leading information security or cyber security functions, ideally within a complex, regulated, or technology-driven environment. You will bring strong knowledge of recognised security frameworks and standards, risk management, data protection, cloud security, and incident management. Relevant professional certifications such as CISSP, CISM, CRISC, or equivalent experience are desirable. Excellent communication and influencing skills are essential, as is the ability to translate technical risks into clear business priorities. You should be commercially aware, pragmatic, and confident operating at both strategic and operational levels, with a collaborative leadership style and a commitment to continuous improvement.

We are seeking an experienced Head of Information Security to lead the development and execution of a robust, enterprise-wide security strategy. This is a senior leadership role responsible for protecting information assets, technology infrastructure, applications and business operations against evolving cyber threats. You will establish security priorities that support organisational objectives, promote a strong security culture and provide clear, pragmatic advice to executive stakeholders and senior leadership.

Your responsibilities will include owning the information security governance framework, policies, standards and risk management processes. You will oversee threat detection, incident response, vulnerability management, identity and access controls, security architecture, third-party assurance and business continuity planning. The role will lead the investigation and management of security incidents, ensuring appropriate escalation, communication, remediation and lessons learned. You will also manage security audits, regulatory compliance, penetration testing and assurance activities, while developing meaningful metrics and reporting for executive and board-level review. Building strong relationships across technology, legal, compliance, risk and operational teams will be essential.

Applicants should have substantial experience leading information security or cyber security functions within a complex environment, together with a strong understanding of recognised security frameworks, data protection requirements and current threat landscapes. Professional certifications such as CISSP, CISM, CRISC or equivalent are desirable. You will combine strategic thinking with the ability to provide hands-on direction during high-priority incidents and transformation programmes. Excellent communication, influencing and people leadership skills are essential, as is experience developing capable teams, managing budgets and working effectively with external partners. The successful candidate will be confident challenging established practices, translating technical risk into clear business language and delivering practical improvements that strengthen resilience without unnecessarily restricting innovation.