Key Responsibilities

• Develop and deliver the organisation's cyber security and information security strategy.
• Establish a multi-year cyber security roadmap aligned with business objectives and risk appetite.
• Lead cyber security risk management, governance and assurance across the organisation.
• Maintain the cyber security risk register and oversee appropriate mitigation plans.
• Provide cyber security advice and assurance to senior leadership and the Board.
• Ensure alignment with relevant legislation, UK GDPR and recognised security frameworks including ISO 27001, Cyber Essentials Plus and NCSC principles.
• Oversee vulnerability management, penetration testing, security monitoring and incident response.
• Lead the organisational response to significant cyber security incidents.
• Develop and maintain cyber incident response, business continuity and disaster recovery arrangements.
• Provide oversight of cyber security across Operational Technology, industrial control systems and critical operational infrastructure.
• Manage third-party and supply-chain cyber security risks.
• Develop organisation-wide cyber security awareness and training programmes.
• Lead and develop internal cyber security capability and specialist external resources.
• Manage cyber security budgets, suppliers, consultants and managed security providers.
• Develop meaningful cyber security KPIs and KRIs and provide regular reporting to senior management and the Board.

Key Responsibilities

• Develop and deliver the organisation's cyber security and information security strategy.
• Establish a multi-year cyber security roadmap aligned with business objectives and risk appetite.
• Lead cyber security risk management, governance and assurance across the organisation.
• Maintain the cyber security risk register and oversee appropriate mitigation plans.
• Provide cyber security advice and assurance to senior leadership and the Board.
• Ensure alignment with relevant legislation, UK GDPR and recognised security frameworks including ISO 27001, Cyber Essentials Plus and NCSC principles.
• Oversee vulnerability management, penetration testing, security monitoring and incident response.
• Lead the organisational response to significant cyber security incidents.
• Develop and maintain cyber incident response, business continuity and disaster recovery arrangements.
• Provide oversight of cyber security across Operational Technology, industrial control systems and critical operational infrastructure.
• Manage third-party and supply-chain cyber security risks.
• Develop organisation-wide cyber security awareness and training programmes.
• Lead and develop internal cyber security capability and specialist external resources.
• Manage cyber security budgets, suppliers, consultants and managed security providers.
• Develop meaningful cyber security KPIs and KRIs and provide regular reporting to senior management and the Board.