> Markdown version of [/jobs/ext/4083233-head-of-department-cyber-information-resilience](https://www.wearedevelopers.com/jobs/ext/4083233-head-of-department-cyber-information-resilience). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of Department, Cyber & Information Resilience - **Company:** Financial Conduct Authority - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cloud Computing Security, Cyber Security, Software Vulnerability Management, Performance Monitor - **Published:** October 7, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=e61852334e5ad4c8 ## About the Role We're proud to be a Disability Confident Employer , and therefore, people or individuals with disabilities and long-term conditions who best meet the minimum criteria for a role will go through to the next stage of the recruitment process. In cases of high application volumes we may progress applicants whose experience most closely matches the role's key requirements. (To learn more about the Disability Confident Scheme Click Here ) Minimum * Significant experience leading cyber security, information resilience, technology risk or comparable enterprise risk functions in a complex organisation, with ability to lean in and drive team performance across all areas (including detection & response, Assurance, SSDLC, policy and AI Security). * Demonstrated experience translating cyber and information resilience risk into senior-level decisions, priorities, control expectations and accountable delivery plans. * Experience owning or contributing to departmental planning, workforce planning, budget prioritisation, governance reporting and management of cross-cutting dependencies. * Experience operating with delegated senior management accountabilities, including evidencing decisions, escalating material risks and maintaining effective governance disciplines. Experience leading through senior managers, deputies or management teams, with the ability to set mandate and direction while enabling operational leaders to manage delivery. * Essential * Strong strategic judgement, with the ability to identify material cyber and information resilience risks, make proportionate trade-offs and advise senior stakeholders clearly. * Ability to lead departmental planning and prioritisation across multiple teams, balancing operational resilience, assurance, change demand, regulatory expectations and resource constraints. * Strong understanding of cyber security risk management, security governance, control frameworks, assurance, incident response, vulnerability management and technology change. * Highly effective communication and relationship management skills, along with the confidence to speak for Cyber & Information Resilience in enterprise governance and senior decision-making settings. * Ability to provide clear mandate, escalation support and constructive challenge to a Deputy CISO and management team without duplicating day-to-day team management. * All candidates should be capable of obtaining and maintaining UK national security vetting at DV level. * Experience shaping cyber operating models, security portfolios, strategic workforce plans, governance forums or cross-organisation control improvement programmes. Understanding of emerging cyber risks, including AI-enabled threats, enterprise use of AI, cloud security, privileged access risk, operational resilience and third-party technology risk. * Desirable * Experience operating as, or closely supporting, a CISO, HoD Cyber or equivalent senior cyber leadership role in a regulated environment. Relevant professional qualification or equivalent experience (such as CISM) or comparable senior cyber credentials or experience. * The FCA's Values & Diversity ## Description The Cyber and Information Resilience department is responsible for protecting the FCA's systems, data, services and information assets, and for providing the organisation with the strategic cyber security, information resilience and assurance capability needed to operate within risk tolerance. This role is the single Head of Department for Cyber and Information Resilience and operates as the organisational CISO. It combines strategic oversight, departmental leadership and delivery of delegated SMF responsibilities from the COO, setting the organisation's cyber strategy, owning departmental planning, risk and governance, and ensuring senior decision-makers receive clear, timely advice on cyber and information resilience matters., * Set the strategic direction for Cyber and Information Resilience, ensuring priorities, operating model, controls and capability plans align to FCA risk appetite, enterprise priorities and regulatory expectations. * Own departmental planning, including annual and in-year prioritisation, workforce and capability planning, budget and FTE considerations, delivery commitments, performance reporting and dependency management. * Deliver delegated SMF responsibilities on behalf of the accountable senior executive, ensuring cyber and information resilience risks, controls, issues and decisions are visible, evidenced and escalated through appropriate governance. * Senior engagement with Technology and Data, enterprise governance forums, audit, and risk is managed to provide clear judgment on material cyber risks, trade-offs, and control expectations. * Provide the mandate, prioritisation and escalation support required for the Deputy CISO and C&IR management team to organise delivery across cyber defence, assurance, governance, security expertise and related teams. Ensure C&IR operates as an integrated department, connecting strategic cyber risk, operational insight, assurance findings, change demand, incident learning and external threat intelligence into a coherent plan of action. *