Head of Information Security

Head of Information Security

London (Hybrid – 2–3 days onsite)

£90,000 + Generous bonus & benefits

We’re looking for an experienced Head of Information Security to lead and mature our cyber and information security capability at a strategic level. This is a senior leadership role for someone already operating at Head of InfoSec level, with the confidence to shape strategy, influence stakeholders, and deliver pragmatic security outcomes in a growing organisation.

The Role

As Head of Information Security, you will own the organisation’s information and cyber security posture end-to-end. You’ll assess current maturity, define a clear security strategy, and lead its implementation across people, process, and technology. Working closely with senior leadership, small internal teams, and trusted third-party vendors, you’ll ensure security is embedded, proportionate, and aligned to business objectives.

Key Responsibilities

• Lead cybersecurity maturity assessments and define a clear, actionable roadmap for improvement
• Develop, implement, and continuously improve the Information Security strategy, policies, and standards
• Act as the senior subject matter expert for information and cyber security across the organisation
• Manage and optimise third-party security relationships, including suppliers, MSPs, and assurance partners
• Oversee security governance, risk management, and compliance activities
• Provide leadership and direction to a small internal team, supported by external vendors
• Engage with senior stakeholders to translate security risk into clear business impact and priorities
• Support audits, certifications, and assurance activities (e.g. ISO 27001, Cyber Essentials Plus)

About You

You’ll be a confident, hands-on security leader who is comfortable operating at both strategic and operational levels.

Essential experience:

• Currently operating (or recently operated) at Head of Information Security level
• Strong background in cybersecurity, strategy development, and delivery
• Experience managing small teams and coordinating work with external security vendors
• Proven track record managing third-party security and supplier risk
• Strong stakeholder management skills, with the ability to influence at senior level

• ISO 27001 certification experience and/or Cyber Essentials Plus
• Broad security background rather than a narrow technical specialism
• Experience in professional services environments advantageous

Why Join?

• Senior leadership role with genuine influence over security direction
• Hybrid working model with flexibility
• Competitive salary of £90,000 plus a generous bonus and benefits package
• Opportunity to shape and mature a security function rather than simply maintain one

This is a fantastic opportunity with a truly awesome organisation and an opportunity not to be missed!