Head of Information Security

About the role

We are seeking an experienced Head of Information Security to lead and mature our client’s security capability at a strategic level. This senior leadership position will own the organisation’s information security posture end‑to‑end, working closely with senior leadership, internal teams and trusted third‑party vendors.

Key responsibilities

• Lead cybersecurity maturity assessments and define an actionable roadmap for improvement.
• Develop, implement and continuously improve the Information Security strategy, policies and standards.
• Manage and optimise third‑party security relationships, including suppliers, MSPs and assurance partners.
• Oversee security governance, risk management and compliance activities, supporting audits and certifications such as ISO 27001 and Cyber Essentials Plus.
• Provide leadership to a small internal team and coordinate work with external vendors.
• Engage senior stakeholders to translate security risk into clear business impact and priorities.
• Understand AI‑related threats and leverage AI to improve the security posture.

Required profile

• Currently operating (or recently operated) at Head of Information Security level.
• Strong background in security, governance, risk and compliance, with proven strategy development and delivery.
• Experience managing small teams and coordinating external security vendors.
• Demonstrated ability to manage third‑party security and supplier risk.
• Excellent stakeholder management and influencing skills at senior level.
• Experience with ISO 27001 certification and/or Cyber Essentials Plus.
• Broad security expertise rather than a narrow technical focus.

Required skills

• ISO 27001
• Cyber Essentials Plus
• AI security awareness
• Risk management
• Security governance

What we offer

• £95,000 salary plus a generous bonus and benefits package.
• Hybrid working model (2–3 days onsite in London).
• Opportunity to shape security strategy in a growing organisation.