Head of IT Security & Cyber

Description:

We are seeking an experienced Head of IT Security & Cyber to lead and shape IT security across a multi-divisional global business. This is a hands-on leadership role, reporting to the Group IT Director, where you will manage a small team of three IT Security professionals while also setting the strategic direction for cybersecurity.

The ideal candidate is both a technical expert and a strategic thinker, capable of balancing in-house vs. vendor-managed services, fostering a culture of security awareness, and making critical security tooling and framework decisions.

Key Responsibilities:

• Develop and implement a Cyber Security strategy aligned with business goals.
• Manage and mentor a small IT Security team, fostering collaboration and professional growth.
• Ensure compliance with industry security standards (ISO 27001, Cyber Essentials+).
• Oversee IT security incidents, risks, and controls, ensuring proper governance.
• Manage third-party security suppliers, ensuring SLAs are met.
• Conduct security audits and bid responses to maintain regulatory compliance.
• Identify and mitigate security risks across the organization.
• Act as a point of escalation for IT Security incidents and ensure timely resolution.
• Monitor and analyze emerging security threats, providing proactive solutions.
• Create and enforce IT Security frameworks, ensuring alignment with business operations.
• Travel to company sites as required to oversee security operations.

Candidate Requirements:

✔ People Management: Proven leadership experience in managing IT Security teams.
✔ Certifications: CISM, CISSP or equivalent required. Additional certifications like CCISO, CCSP are a plus.
✔ Compliance Expertise: Strong knowledge of ISO 27001, ISO 27002, Cyber Essentials+.
✔ Technical Knowledge: Experience with Azure, AWS, GCP, and enterprise IT server technologies.
✔ Security Tools: Familiarity with firewalls, cyber forensics, and IT security frameworks.
✔ Communication Skills: Ability to convey complex security concepts to non-technical stakeholders.
✔ Stakeholder & Vendor Management: Experience in managing internal teams and third-party suppliers.
✔ Problem-Solving: Strong troubleshooting skills for IT security incidents.
✔ Self-Starter: A proactive, strategic thinker who takes ownership of security initiatives.
✔ Security Clearance: Must be eligible for required security clearance.

Desirable Skills:

➕ Firewall Expertise: Hands-on experience in firewall configuration and management.
➕ Cyber Forensics: Knowledge of forensic analysis techniques.
➕ ITIL & Prince2 Certifications: Additional qualifications are an advantage.
➕ Mentoring Experience: Ability to coach and upskill IT Security professionals.

Why Join?

🚀 Competitive Salary & Benefits Package (£95K - £110K)
🏡 Hybrid Work Model (Preference for candidates near Birmingham or Manchester)
📈 Strategic Leadership Role with autonomy to shape IT Security
🎓 Training & Certification Support for career growth
🌍 Global Organization with multi-divisional exposure