Head of Security Information Security
Reference: GK-8
We’re looking for an experienced Head of Information Security to lead and strengthen a modern security function. This is a hands-on contract, working closely with the CTO and engineering teams to embed security across the product lifecycle.
Key responsibilities
Key responsibilities
- Own and evolve the information security strategy.
- Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance.
- Embed secure-by-design and DevSecOps across engineering.
- Drive security improvements through AI, automation and technical controls.
- Lead security risk, threat modelling, vulnerability management and incident response.
- Oversee third-party/supplier security and operational security controls.
- Partner with SOC and engineering teams to improve detection and response.
- Support client assurance and security audits.
- CISSP, CISM or equivalent.
- Strong knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR.
- Proven leadership across information security, cyber risk or assurance.
- Strong technical understanding of cloud, application, network, endpoint and data security.
- Experience with SIEM/SOC, vulnerability management and incident response.
- Strong stakeholder management with a pragmatic, hands-on approach.