Point your AI agent at freehire and let it find you a job.

Get the CLI →

dmg::media

NewBe an early applicant

Chief Information Security Officer (CISO)

Discussion

Summary

Leads dmg media's cyber security and tech risk function from its London HQ — setting enterprise security strategy, advising the board, governing responsible AI adoption, and overseeing SecOps, crisis response, and a 12-person team. Focus areas: SOC operations, enterprise risk, GDPR/privacy compliance, and AI/LLM risk in a 24/7 newsroom environment.

Location: DMGT HQ - High Street Kensington, London
Position: Permanent

About the Role

We are seeking a dynamic, credible, and highly influential Chief Information Security Officer (CISO) to lead our cyber security and tech risk function from our London headquarters.

In this role, you will balance strategic vision with operational execution. You will safeguard our vast digital media infrastructure against an evolving global threat landscape while enabling business growth and digital innovation. Crucially, you will spearhead the governance and responsible adoption of Artificial Intelligence (AI) across our editorial, engineering, and commercial workflows.

Main Responsibilities

Strategic Leadership & Board Engagement:

  • Strategy Execution: Define and execute the enterprise-wide cyber security and information risk strategy, ensuring it is aligned with fast-moving media and commercial growth objectives.
  • Executive Advisory: Act as the principal security advisor to the Board and Executive Committee, translating complex cyber risks and regulatory exposure into clear, commercially focused business impact.
  • Business Partnership: Partner closely with editorial, legal, technology, and operations teams to embed security into core business decision-making and project launches.

Next-Gen Governance & AI Security:

  • AI Security & Governance: Lead the organisation’s approach to AI security and responsible adoption. Establish robust control frameworks and risk mitigation strategies tailored to media-specific AI usage (e.g., editorial automation, data scraping, LLMs).
  • Enterprise Risk & Compliance: Drive risk and governance initiatives to ensure ongoing compliance with UK Data Protection (GDPR), online privacy standards, and relevant media regulations.
  • Metrics & Reporting: Establish clear security metrics, reporting frameworks, and executive dashboards to maintain board-level visibility of our risk posture.

Security Operations & Cyber Resilience:

  • SecOps Management: Oversee day-to-day security operations, threat management, threat intelligence, and cyber resilience capabilities across our high-traffic digital platforms.
  • Crisis Leadership: Lead crisis management and executive-level incident response protocols during live cyber threats or business continuity events.
  • Vendor & Ecosystem Management: Manage strategic third-party technology and security vendors, ensuring performance, commercial value delivery, and robust supply chain risk mitigation.

Team Development:

  • People Leadership: Lead, mentor, and develop a high-performing team of 12 specialists spanning security operations, tech risk, governance, and assurance functions.

Person Specification

  • Executive Track Record: Proven experience operating as a CISO or a senior cyber security executive within a large, high-availability, or digital-first environment (media, tech, or entertainment sectors preferred).
  • Emerging Tech Proficiency: Strong, practical understanding of AI risk, LLM vulnerabilities, data protection nuances in machine learning, and emerging technology challenges.
  • Operational Mastery: Deep expertise across security operations (SOC), enterprise risk management, identity & access management, and third-party vendor oversight.
  • Commercial Acumen: Strong business acumen with the ability to articulate technical risk in terms of reputation, brand trust, and commercial impact.
  • Exceptional stakeholder engagement skills, with the capability to firmly influence and collaborate at the Board and Executive level.
  • Crisis Management: A calm, decisive, and authoritative leadership style under pressure, with experience managing high-stakes cyber incidents.
  • Adaptability: Agility to thrive within a fast-paced, constantly evolving, 24/7 newsroom and media tech environment.

Package Description

Our benefits package increases the longer you’ve been with us. Here’s what to expect:

  • 25 days’ holiday (increasing by 1 per year up to a total of 30)
  • Pension plan and life cover
  • Discounts on online shopping, dining cards and vouchers, and access to our Employee Assistance Programme
  • Onsite gym, subsidised canteen and onsite nurse and GP clinics

Plus much more...

About Us

dmg media’s brands deliver highly engaging, trusted content to millions of loyal customers around the globe, 24 hours a day, seven days a week. Together, Daily Mail, The Mail on Sunday, Metro and The i Paper, reach more than 24million people daily. In the UK alone, its brands reach over 10million people daily. Its newsbrands are expert at getting to the bottom of the stories most relevant to our readers.

To find out more about dmg media and its brands visit www.dmgmedia.co.uk.

Our Commitment

We are committed to increasing diversity and maintaining an inclusive workplace culture. We welcome applications from all qualified candidates regardless of their ethnicity, race, gender, religious beliefs, sexual orientation, age, marital status, or disability.

We are Disability Confident Committed. Please let us know if you require any recruitment documentation in other formats or if you require reasonable adjustments to be made during the recruitment process. Please be assured that any such information will be held separately to your recruitment application and will not be considered as part of the selection process.

Skills

See also

Security jobs by country — openings, pay and top skills →

Tailor your CV for this role?

We couldn't check your fit for this role — add a CV to your profile to see it next time.

A new version of freehire is available