KEY ACCOUNTABILITIES

• Develop and implement a cyber security strategy aligned with ISO27001 standards and business objectives.
• Lead the design, implementation, and continuous improvement of the Information Security Management System (ISMS).
• Oversee risk management activities, including risk assessments, mitigation planning, and incident response.
• Work with senior stakeholders to ensure alignment between security initiatives and organisational priorities.
• Drive continuous improvement of the cyber security programme through regular reviews and updates.
• Manage cyber security incidents to ensure effective and timely resolution.
• Support a security-aware environment through training, awareness activities, and clear communication.
• Ensure compliance with all relevant legal, regulatory, and contractual obligations.

EXPERIENCE, SKILLS AND KNOWLEDGE

• Extensive experience (typically 10+ years) in cyber security or a closely related field.
• Strong understanding of ISO27001 standards and hands-on experience in developing, implementing, and maintaining an Information Security Management System (ISMS).
• Proven experience managing cyber security incidents and leading effective response strategies.
• Demonstrated ability to lead and develop high-performing cyber security teams.
• Strong analytical and problem-solving skills, with the ability to assess complex risks and develop practical solutions.
• Clear and confident communicator, with experience engaging and influencing senior stakeholders.
• Strong organisational skills, with the ability to manage multiple priorities in a fast-paced environment.
• Strategic mindset with a focus on continuous improvement and professional development.
• Experience aligning cyber security initiatives with broader business objectives and risk priorities.

The Head of Cyber Security is responsible for leading the strategic direction of cyber security at Just. This includes developing, implementing, and maintaining an effective Information Security Management System (ISMS) to achieve and sustain ISO27001 certification. The role ensures alignment between cyber risk and business priorities, promotes a security-focused approach, and supports the organisation in proactively managing threats and responding to incidents.