Head of Information Security

at  Action for Children

GOOD TO KNOW

Closing date for applications; 25th July and interviews are provisionally scheduled to take place week commencing 5th August
Contact: If, for any reason, you need support with your application, please contact Laura McCarthy at Laura.McCarthy2@actionforchildren.org.uk. We’ll be happy to give you any support you require.

DON’T MEET EVERY SINGLE REQUIREMENT?

If you’re excited about this role but your experience doesn’t align perfectly with the job description, we’d love you to apply anyway. You might just be the perfect person for this role, or another role within the Action for Children family.

WANT TO KNOW MORE ABOUT ACTION FOR CHILDREN?

Find us on X, LinkedIn, Facebook or YouTube to get to know us better

A BIT ABOUT THE ROLE

As the Head of Information Security at Action for Children, you will champion our cyber defences and ensure the safety of our digital landscape.
In this pivotal role, you will be the architect of our Information Security Strategy, steering the organisation through the complexities of cyber threats with expertise and foresight. By leading a team of experts, you will set up clear security rules and strong day-to-day processes that are both affordable and show real improvements in our services. Your leadership will not only safeguard our systems but will also inspire a culture of security awareness and compliance that permeates every level of our charity.
You will also enable effective decision making on information security matters and increase cyber resilience and awareness across the organisation to establish clear security controls and robust operational procedures that provide value for money whilst minimising risk to staff and service users.

Some key responsibilities for the Head of Information Security role;

• Guide and uphold our Information Security Strategy and framework to meet our goals, regulatory needs, and standards like ISO 27001, PCI DSS and Cyber Essentials Plus.
• Take responsibility for identifying and defending against threats, managing risks, and using the latest technology for ongoing departmental improvements.
• Collaborate with internal IT teams to integrate security into hardware and software management, and promote IT security awareness among senior management.
• Oversee penetration testing, vulnerability scans, incident responses, data loss prevention, phishing tests, and system audits.
• Conduct security evaluations of third-party vendors and service providers, advising on and planning application security initiatives