Head of Security (CISO)

About the role

ClearCourse is looking for an experienced Head of Security (CISO) to shape and execute a group‑wide security strategy across a portfolio of more than 40 software and payments businesses. Reporting to the Chief Technology & Transformation Officer and working closely with the Board and Audit Committee, you will safeguard a complex technology estate that spans payments, healthcare and B2B SaaS.

Key responsibilities

• Define and lead the Group’s security strategy, policies and governance framework.
• Provide Board‑level reporting on security posture, risks and compliance activities.
• Oversee security operations, including threat detection, incident response and remediation.
• Act as the executive lead during security incidents and manage external stakeholder communications.
• Own PCI‑DSS compliance for ClearAccept and ClearDebit payment platforms.
• Lead the Governance, Risk and Compliance (GRC) function covering ISO 27001, Cyber Essentials, PCI‑DSS and data protection.
• Manage relationships with auditors, regulators, cyber insurers and certification bodies.
• Drive security assessments and integration for acquisitions, aligning new entities to Group standards.
• Partner with Platform Engineering to embed security practices into development lifecycles without slowing delivery.
• Build and develop a high‑performing security team.

Required profile

• Previous experience at CISO level within a multi‑product or multi‑entity organisation.
• Hands‑on experience leading PCI‑DSS compliance programmes and QSA assessments.
• Proven ability to build and manage enterprise‑wide GRC frameworks and risk registers.
• Experience integrating security functions following M&A activity.
• Strong understanding of DevSecOps principles and embedding security into engineering practices.
• Track record of leading major security incidents and managing stakeholder communications.
• Ability to influence Board and executive leadership.
• Leadership experience building and developing high‑performing security teams.

Required skills

• PCI‑DSS compliance
• ISO 27001
• Cyber Essentials
• DevSecOps
• GRC frameworks
• Risk register management

What we offer

• Competitive salary plus benefits
• 25 days holiday plus your birthday off
• Private medical insurance (Bupa) and health cash plan
• Life assurance and income protection