Head of Cyber Security

About the role

A leading regulatory organisation is seeking an experienced Head of Cyber Security to provide strategic leadership and direction across its cyber and information security function. This senior, cross‑functional role will shape and deliver a comprehensive cyber security strategy, ensuring organisational resilience while enabling secure digital innovation.

Key responsibilities

• Define and deliver the organisation‑wide cyber security strategy and roadmap.
• Establish and evolve the cyber security operating model, including team structure.
• Develop and implement security policies, standards and best practices.
• Provide expert advice to senior leadership on cyber risk and resilience.
• Lead cyber risk identification, assessment and mitigation activities.
• Oversee security architecture to ensure alignment with the wider technology strategy.
• Drive continuous improvement through security assessments, testing and reporting.
• Ensure effective incident detection, response and recovery capabilities.
• Lead vulnerability management and remediation across all technology environments.
• Oversee third‑party security testing, including penetration testing and phishing simulations.
• Promote a strong cyber security culture through training and awareness initiatives.
• Monitor and report on threat intelligence trends and emerging risks.

Required profile

• Proven senior‑level experience developing and delivering cyber security strategies in complex organisations.
• Strong track record influencing senior leadership and driving organisation‑wide change.
• Experience within regulated or public‑sector environments (desirable).
• Professional certifications such as CISSP, CISM or CISO (desirable).

Required skills

• Security frameworks: ISO 27001, NIST, Cyber Essentials.
• Enterprise security tools: SIEM, IDS, firewalls, encryption technologies.
• Cloud and hybrid security environments.
• Vulnerability assessment and penetration testing.
• Incident response and remediation processes.
• Threat intelligence monitoring.

What we offer

• Salary range £88,000‑£97,000 per year.
• Hybrid working model (2 days onsite in London).
• 30 days holiday.
• 8 % pension contribution.
• Additional employee benefits.