Head of Information Security

About the role

We are seeking a Head of Information Security to lead and develop a modern, security‑first function within our growing technology business. Reporting to the CTO, you will combine strategic leadership with hands‑on technical work, partnering with Engineering, Infrastructure and Operations to embed security across the organisation.

Key responsibilities

• Define and deliver the Information Security strategy, policies and governance framework.
• Develop robust security controls aligned with ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS.
• Embed Secure by Design and DevSecOps principles across engineering teams.
• Lead cyber risk management, incident response, threat modelling and vulnerability management.
• Drive AI‑enabled automation to enhance security operations and threat detection.
• Oversee third‑party security, supplier assurance and client audits.
• Recruit, mentor and grow a small team of InfoSec and Cyber Security analysts.

Required profile

• Proven experience leading Information Security or Cyber Security functions in technology‑focused organisations.
• Relevant certifications such as CISSP or CISM.
• Strong knowledge of ISO27001, NIST, PCI DSS, GDPR and overall security governance.
• Experience designing security strategy, GRC programmes and defining controls.
• Excellent communication, stakeholder management and leadership abilities.

Required skills

• CISSP
• CISM
• ISO27001
• NIST CSF
• PCI DSS
• GDPR
• SOC2
• Secure by Design
• DevSecOps
• AI security
• Automation
• SIEM
• SOC
• Vulnerability management
• Threat modelling
• Cloud security

What we offer

• Competitive salary of £100,000 per year plus benefits.
• Permanent contract with hybrid working in West London.
• Opportunity to shape a mature, AI‑enabled security capability.