Head of Information Security

Head of Information Security

London (Hybrid – 2–3 days onsite)

£90,000 + Generous bonus & benefits

We’re looking for an experienced Head of Information Security to lead and mature our cyber and information security capability at a strategic level. This is a senior leadership role for someone already operating at Head of InfoSec level , with the confidence to shape strategy, influence stakeholders, and deliver pragmatic security outcomes in a growing organisation.

The Role

As Head of Information Security, you will own the organisation’s information and cyber security posture end‑to‑end. You’ll assess current maturity, define a clear security strategy, and lead its implementation across people, process, and technology. Working closely with senior leadership, small internal teams, and trusted third‑party vendors, you’ll ensure security is embedded, proportionate, and aligned to business objectives.

Key Responsibilities

• Lead cybersecurity maturity assessments and define a clear, actionable roadmap for improvement
• Develop, implement, and continuously improve the Information Security strategy , policies, and standards
• Act as the senior subject matter expert for information and cyber security across the organisation
• Manage and optimise third‑party security relationships , including suppliers, MSPs, and assurance partners
• Oversee security governance, risk management, and compliance activities
• Provide leadership and direction to a small internal team , supported by external vendors
• Engage with senior stakeholders to translate security risk into clear business impact and priorities
• Support audits, certifications, and assurance activities (e.g. ISO 27001, Cyber Essentials Plus)

About You

You’ll be a confident, hands‑on security leader who is comfortable operating at both strategic and operational levels.

Essential experience:

• Currently operating (or recently operated) at Head of Information Security level
• Strong background in cybersecurity , strategy development, and delivery
• Experience managing small teams and coordinating work with external security vendors
• Proven track record managing third‑party security and supplier risk
• Strong stakeholder management skills, with the ability to influence at senior level
• ISO 27001 certification experience and/or Cyber Essentials Plus
• Broad security background rather than a narrow technical specialism
• Experience in professional services environments advantageous

Why Join?

• Senior leadership role with genuine influence over security direction
• Hybrid working model with flexibility
• Competitive salary of £90,000 plus a generous bonus and benefits package
• Opportunity to shape and mature a security function rather than simply maintain one