Head of Security Information Security

We’re looking for an experienced Head of Information Security to lead and strengthen a modern security function. This is a hands-on contract, working closely with the CTO and engineering teams to embed security across the product lifecycle.

Key responsibilities

Own and evolve the information security strategy.

Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance.

Embed secure-by-design and DevSecOps across engineering.

Drive security improvements through AI, automation and technical controls.

Lead security risk, threat modelling, vulnerability management and incident response.

Oversee third-party/supplier security and operational security controls.

Partner with SOC and engineering teams to improve detection and response.

Support client assurance and security audits.Experience required

CISSP, CISM or equivalent.

Strong knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR.

Proven leadership across information security, cyber risk or assurance.

Strong technical understanding of cloud, application, network, endpoint and data security.

Experience with SIEM/SOC, vulnerability management and incident response.

Strong stakeholder management with a pragmatic, hands-on approach