London
Nub News
Back to Jobs

Head of Information Security

Where

Ealing

What

I.T. & Communications

Type

Permanent

Salary

Annual

  Apply On Site

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, 4/1 Hybrid. c.£100k +Benefits

Head of Information Security / CISO / Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing technology business. Reporting to the CTO, you'll combine strategic leadership with a hands-on technical approach, working closely with Engineering, Infrastructure and Operations teams to embed security across the organisation.

The role will adopt Information Security strategy, governance, risk and compliance while implementing practical security controls, automation and DevSecOps best practice. This is an excellent opportunity to influence technology strategy, lead security initiatives and help shape a mature, AI-enabled security capability whilst remaining hands-on in the early stages. In time, you will build a small team of InfoSec and Cyber Security Analysts around you.

Key Responsibilities:

  • Define and deliver the Information Security strategy, policies and governance framework.
  • Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS.
  • Embed Secure by Design and DevSecOps principles across engineering teams.
  • Lead cyber risk management, incident response, threat modelling and vulnerability management using a range of contemporary tools.
  • Drive AI and automation to enhance security operations and threat detection.
  • Oversee third-party security, supplier assurance and client audits.
  • Recruit, mentor, lead and develop the Information Security team.

As such we're looking for candidates with experience leading Information Security or Cyber Security functions within technology-led organisations. You will possess:

  • CISSP, CISM or equivalent security certification.
  • Strong knowledge of ISO27001, NIST, PCI DSS, GDPR and Information Security Governance.
  • Experience developing security strategy, GRC and cyber risk programmes including definition of security controls
  • Strong technical knowledge across cloud, network, endpoint, application and data security.
  • Experience with SIEM, SOC, vulnerability management and incident response.
  • Knowledge of DevSecOps, security automation and modern cloud environments.
  • Excellent communication, stakeholder management and leadership skills.

You may have been working as a CISO, Information Security Manager, Cyber Security Consultant or within another senior InfoSec/CyberSec capacity which has granted you experience in both security control definition and hands-on practical management of security threats and incidents including vulnerability scanning and penetration testing.

This is an outstanding opportunity to join a forward-thinking medium sized global organisation where you'll shape the security strategy, influence technology direction and build a modern Information Security function using the latest cloud, automation and AI technologies.

Location is commutable from West London, Middlesex, East Berkshire, North Surrey, South West London and parts of South London (Croydon etc). Accessible via District Line (West) and some mainline services.

  Apply On Site
Back to Jobs

Related Jobs

Digital Third Party Assurance Senior Manager

BDO UK

Annual

City (EC3A 2DB)

Permanent

Ideas People Trust
I.T. & Communications
Read More
Cyber Security Operations Manager

DGH Recruitment Ltd.

110000 Annual

City (EC1A2)

Permanent

Cyber Security Operations ManagerCity of London (3 days per week in the office)The role will be responsible for the operational delivery of my clients cyber security function, ensuring that security monitoring, detection, response, engineering and operational security controls effectively protect the Firm from cyber threats.The role leads day-to-day cyber security operations, develops and maintains security technologies, manages cyber incidents and drives continuous improvement of security monitoring and response capabilities, and ensure that change programmes incorporate security requirements and deliver security by design.The role provides technical leadership across security operations and works closely with Infrastructure, Business Systems, Service Delivery, Risk & Compliance and third-party security providers to ensure threats are identified, investigated and managed effectively.Responsibilities:Security Operations - Manage the day-to-day operation of the cyber security capability. - Lead the Cyber Security team, including coaching, mentoring and performance management. - Oversee threat monitoring, detection, investigation and response activities.Security Engineering - Own and maintain cyber security technologies, ensuring they remain effective, supported and appropriately configured. - Develop, tune and optimise security controls across the technology estate. - Lead implementation of new security technologies and enhancements. - Review security architecture and technical designs to ensure alignment with security standards.Vulnerability Management - Manage the vulnerability management programme.Incident Response - Lead cyber security incident management and response activities. - Coordinate technical investigations and containment activities.Security Awareness Training - Support cyber security awareness initiatives.Required Skills/Experience: - Strong technical knowledge of Microsoft Azure, Entra ID, SIEM, Email Security, EDR, SASE, IPS/IDS and Vulnerability management - Strong people management and leadership capabilities. - Ability to coach and develop cyber security professionals. - Ability to communicate technical cyber risks to non-technical stakeholders.Desirable Skills/Experience: - Experience building or transforming security operations functions. - Experience with managed SOC services. - Experience with security orchestration and automation technologies.Cyber Security Operations ManagerIn accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon DGH Recruitment Limited having first sought approval of its client to find candidates for this position.DGH Recruitment Limited acts as both an Employment Agency and Employment Business
I.T. & Communications
Read More

Sign-up for our FREE newsletter...

We want to provide london with more and more clickbait-free news.

We are using 🍪

Agree