Head of Security Information Security

We’re looking for an experienced Head of Information Security to lead and strengthen a modern security function. This is a hands-on contract, working closely with the CTO and engineering teams to embed security across the product lifecycle.

Key responsibilities

• Own and evolve the information security strategy.
• Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance.
• Embed secure-by-design and DevSecOps across engineering.
• Drive security improvements through AI, automation and technical controls.
• Lead security risk, threat modelling, vulnerability management and incident response.
• Oversee third-party/supplier security and operational security controls.
• Partner with SOC and engineering teams to improve detection and response.
• Support client assurance and security audits.

Experience required

• CISSP, CISM or equivalent.
• Strong knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR.
• Proven leadership across information security, cyber risk or assurance.
• Strong technical understanding of cloud, application, network, endpoint and data security.
• Experience with SIEM/SOC, vulnerability management and incident response.
• Strong stakeholder management with a pragmatic, hands-on approach.