Chief Information Security Officer / CISO

This is an excellent opportunity for a seasoned security leader who has operated within complex, highly regulated, research-led, public sector or mission-driven environments. Experience across sectors such as Higher Education, Charity, Research & Development, Scientific Research, Government, Not-for-Profit, Public Sector or Similar Organisations would be highly advantageous.

The successful candidate will be responsible for leading and enhancing the organisation’s cyber security capability across operational security, governance, risk management, cyber assurance, security strategy and stakeholder engagement.

The organisation currently operates within a managed SOC environment, and the incoming CISO will be expected to maximise the effectiveness of existing security operations while driving strategic improvements across the wider security function.

Key Responsibilities

• Provide executive leadership for the information and cyber security function.
• Develop and execute a pragmatic cyber security strategy aligned to business and organisational objectives.
• Lead cyber governance, risk management and security assurance activities.
• Oversee operational security capabilities, including management of a third-party SOC and associated security providers.
• Establish and maintain effective security policies, standards and control frameworks.
• Deliver security reporting and risk updates to Executive Leadership Teams, Boards, Audit Committees and key stakeholders.
• Lead security incident preparedness, response oversight and resilience planning.
• Drive cyber maturity improvements across people, process and technology.
• Manage security risk assessments and remediation programmes.
• Ensure compliance with relevant regulatory, legal and governance requirements.
• Provide expert guidance on emerging threats, vulnerabilities and cyber risk exposure.
• Collaborate with technology, data protection, risk and business leaders to embed security across the organisation.

• Previous experience operating as a CISO, Interim CISO, Head of Cyber Security, Director of Information Security or equivalent senior leadership role.
• Demonstrable experience leading enterprise-wide cyber security programmes.
• Strong background covering:
• Operational Security
• Security Governance
• Cyber Risk Management
• Cyber Assurance
• Security Strategy
• Third-Party Security Management
• Incident Response & Cyber Resilience
• Experience overseeing or working alongside managed SOC services.
• Strong stakeholder management skills with the ability to engage both technical and non-technical audiences.
• Proven ability to influence executive leadership and board-level stakeholders.
• Experience operating within complex, federated, research-led or highly regulated environments.