> Markdown version of [/jobs/ext/80609-director-of-information-security-operations](https://www.wearedevelopers.com/jobs/ext/80609-director-of-information-security-operations). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Director of Information Security Operations

- **Company:** Xpertise Recruitment
- **Location:** Derbyshire, UK
- **Salary:** £90,000.0 - £100,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security
- **Published:** May 21, 2026
- **Apply:** https://www.careerjet.co.uk/jobad/gb78f53d479611139f6403a61d3d4b800f

## About the Role

You will be operating at Head of or Director level within information security, risk, or governance and will bring a strong track record of delivering both strategy and operational improvement.
You will have deep experience of security frameworks, controls, and governance, combined with the credibility to engage and influence at senior level. Just as importantly, you will be able to bring people with you, ensuring that security is seen as a business enabler rather than a barrier.
You will be a clear communicator who can simplify complex concepts and enable confident decision making across non technical stakeholders.
Relevant certifications such as CISSP or CISM would be advantageous but are not essential for the right individual.
At Xpertise, we keep things human, your application will always be reviewed by a real person. We do not rely on AI or automated screening tools. Every candidate receives fair, considered attention from our team.

## Description

We are working with a well established and growing professional services organisation to appoint a Director of Information Security Operations. This is a pivotal leadership role for an individual who can operate at both a strategic and practical level, shaping direction while ensuring that controls, frameworks, and governance are fully embedded across the business.
This is an opportunity to join a business where security is taken seriously and where the successful individual will be empowered to influence at a senior level and drive meaningful change.
The Role
You will be responsible for translating information security strategy into effective delivery across the organisation. Working closely with senior leadership and business units, you will ensure that risk is understood, owned, and managed in a way that supports commercial decision making.
This role requires a balance of strategic thinking and hands on leadership, ensuring that frameworks and controls are not only well designed but are consistently applied and understood by the wider business., * Lead the development and ongoing maturity of the organisation's security operating model

 * Own and enhance the security control framework, aligned to recognised standards such as ISO or NIST
 * Drive enterprise wide risk management processes, ensuring clear visibility and accountability
 * Oversee the implementation and effectiveness of core security controls across technology and business functions
 * Act as a trusted advisor to senior stakeholders, translating technical risk into clear and practical business decisions
 * Empower business unit leaders to take ownership of risk within defined frameworks
 * Support audit, compliance, and assurance activities, ensuring strong and consistent outcomes
 * Contribute to organisational resilience, including incident response and business continuity
 * Build a strong security culture through engagement, communication, and leadership


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [AI is dead, long live AK](https://www.wearedevelopers.com/videos/1093-ai-is-dead-long-live-ak)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)