Head of IT Security Operations

GKN Automotive
Birmingham
1 year ago
Applications closed

Related Jobs

View all jobs

Head of IT

Interim Head of IT

IT Portfolio Manager

Group IT Support Engineer

Head of Platform Operations

The Head of Data and Information Security

Head of IT Security Operations

Role purpose

The Head of IT Security Operations is responsible for managing the day to day security of GKN Automotive’s technology stacks across multiple international locations. You will lead the security operations team in a technical management role and work closely with other functions within GKN Automotive, to ensure security operations is at the forefront of innovation and best practice. You will play a critical part in identifying and safeguarding GKN Automotive from intrusion, security threats, security weaknesses, software vulnerabilities. You are the key authority for the coordination and management of security incident. Reporting to the Director of IT Security you will provide regular KPI reporting including updates on the threat landscape and intelligence.

Key responsibilities

Leadership and Coordination:Lead the Security Operations team to deliver best practice security capabilities globally. Ensure a consistent and repeatable approach to security across all regions and sites.Compliance and Audits:Provide support and assistance in managing audits where necessary, particularly concerning ISO27001, NIS2, TISAX and other compliance standards.Subject Matter Expertise:Serve as the SME for all Security Operations functions, including, but not limited to: SIEM Anti-Virus Vulnerability and Patch Management and use of tools Threat Intelligence Incident Management Security Architecture Project Assurance Supplier incident managementSecurity Posture Improvement:Define programme goals and roadmaps based on GKN Automotive’s needs and strategic direction and ensure that committed projects are delivered on schedule by the relevant team members.Support and Issue Resolution:Act as the escalation point for the Security Operations team. Facilitate strong alignment between IT Security and other IT and Business functions with GKN Automotive. Run patch and vulnerability management forums. Support Security Champions Network.Consultancy and Advice:Provide information security consultancy and advice to other GKN Automotive teams. Organise forums to share good practices and improvement initiatives for security enhancements.Reporting and Risk Management:Set reporting requirements for GKN leadership reviews and meetings. Oversee security risk registers, ensuring regular assessments and timely risk treatment activities. Assist in implementing remediation actions to mitigate risks and meet best practice expectations. Report to senior business stakeholders including IT Directors, VPs, and CIO.Audit Support:Provide assistance and support for site IT and OT and security audits.

Skills

Experience and Knowledge:Proven experience in information security with a track record of influencing and implementing major cultural changes. Experience of managing cross-functional teams in support of delivering expected organisational outcomes Knowledge of recognised frameworks and standards, such as TISAX, ISO 27001, NIST, CIS benchmark. Experience in physical security measures and their implementation.Technical Skills:A subject matter expert in developing and operationalising techniques for security operations. Experience with industry standard SIEMs. Understanding of cloud infrastructure ., AWS, Azure, etc. Familiarity with web services, multi-tiered systems, workflow modelling and enterprise application integration. Awareness of IT and OT security technologies and best practices. Ability to conduct gap analysis, summarise results, and produce remediation plans.Leadership and Communication:Proven experience in team leadership with the ability to motivate teams to deliver advantageous outcomes. Excellent stakeholder management and collaboration skills, with the ability to work across teams and departments at all levels. Good communication skills to convey information security and risk-related concepts to both technical and non-technical audiences.Organizational Skills:Ability to work on own initiative and meet personal deadlines while contributing to global team objectives. Good organisational skills and attention to detail.Industry Knowledge:Knowledge of applicable data privacy practices and laws (., GDPR). Experience working in the automotive sector

Education

Bachelor's or Master's degree in Computer Science, IT Security, Information Systems, or a related field. Relevant certifications such as CISSP, CISM  Additional certifications related to cybersecurity and data privacy (., ISO 27001 Lead Implementer, TISAX Assessor) are a plus.

Experience

At least 7 years of experience in information security, with a focus on leading security functions. Experience with recognised security frameworks and standards, such as TISAX, ISO 27001, NIST and CIS.  Must be able to demonstrate the ability to lead teams and manage global security operations effectively. Proven track record in stakeholder and partner/vendor management and collaboration across various departments. Must have practical experience with technical tools utilized in Security Operations, including but not limited to SIEM systems, Threat Intelligence platforms, Vulnerability and Patch Management solutions, the Microsoft Defender suite, web proxies, firewalls, Email gateway technologies, and endpoint protection tools. Must have experience in enhancing Security Operations capabilities to align with the strategic objectives of the business and address the risks posed by an evolving threat landscape.

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Education

The Skills Gap in Cyber Security Jobs: What Universities Aren’t Teaching

Cyber security has become one of the most critical disciplines in the modern economy. From protecting financial systems and healthcare data to securing national infrastructure, cloud platforms and supply chains, cyber security professionals now sit at the frontline of digital trust. Demand for cyber security talent in the UK has surged. Job vacancies remain high, salaries continue to rise, and organisations across every sector report difficulty hiring skilled professionals. Yet despite this demand, many graduates struggle to break into cyber security roles and employers consistently report that candidates are not job-ready. The problem is not intelligence, ambition or academic effort. It is a persistent and widening skills gap between university education and real-world cyber security work. This article explores that gap in depth: what universities teach well, what they routinely miss, why the gap exists, what employers actually want, and how jobseekers can bridge the divide to build sustainable careers in cyber security.

Jobs Careers

Cyber Security Jobs for Career Switchers in Their 30s, 40s & 50s (UK Reality Check)

If you’re thinking about switching into cyber security in your 30s, 40s or 50s, you’re in good company. Across the UK, organisations of all sizes are hiring people from diverse backgrounds to protect systems, data & customers. But with hype around “hackers” & quick-win courses, it’s hard to separate reality from fiction. This guide gives you a UK reality check: which roles genuinely exist, what employers actually want, how training really works, what to expect on salary & progression & whether age matters. Whether you come from finance, project management, operations, law, HR or customer service, there is a credible route into cyber security if you approach it strategically.

Jobs

How to Write a Cyber Security Job Ad That Attracts the Right People

Cyber security is now a board-level priority for organisations across the UK. From financial services and healthcare to critical infrastructure, SaaS platforms and the public sector, demand for skilled cyber security professionals continues to grow. Yet despite this demand, many employers struggle to attract the right candidates. Cyber security job adverts often generate large volumes of applications, but few are a genuine match. Meanwhile, experienced security engineers, analysts and architects quietly ignore adverts that feel vague, unrealistic or disconnected from real security work. In most cases, the problem is not a lack of talent — it is the quality of the job advert. Cyber security professionals are trained to assess risk, spot weaknesses and question assumptions. A poorly written job ad signals organisational immaturity and weak security culture. A well-written one signals seriousness, competence and trust. This guide explains how to write a cyber security job ad that attracts the right people, improves applicant quality and positions your organisation as a credible security employer.

🍪 We use cookies to enhance your browsing experience on our website. By continuing to use this site, you consent to the use of cookies as described in our Cookie Policy. You can review our Cookie Policy for more information.