What you'll be doing

• Leading and developing the organisation's cyber defence and information security capability
• Managing, coaching and developing a team of Information Security professionals
• Managing security vendor partners and making sure they deliver
• Owning and improving security incident response, including communications and recovery
• Leading security investigations and overseeing remediation after incidents or identified risks
• Driving compliance with security policies, standards and regulations, including ISO 27001, Cyber Essentials and PCI-DSS
• Managing security audits, risk assessments and improvement plans
• Delivering security reporting, metrics and risk updates to senior stakeholders and governance forums
• Working with technology and business teams to build security into projects, change initiatives and supplier engagements
• Promoting a strong security culture through awareness, education and engagement
• Keeping ahead of emerging threats and vulnerabilities to keep improving security maturity

What you'll be doing

• Leading and developing the organisation's cyber defence and information security capability
• Managing, coaching and developing a team of Information Security professionals
• Managing security vendor partners and making sure they deliver
• Owning and improving security incident response, including communications and recovery
• Leading security investigations and overseeing remediation after incidents or identified risks
• Driving compliance with security policies, standards and regulations, including ISO 27001, Cyber Essentials and PCI-DSS
• Managing security audits, risk assessments and improvement plans
• Delivering security reporting, metrics and risk updates to senior stakeholders and governance forums
• Working with technology and business teams to build security into projects, change initiatives and supplier engagements
• Promoting a strong security culture through awareness, education and engagement
• Keeping ahead of emerging threats and vulnerabilities to keep improving security maturity