Cyber Security Programme Manager (Security Transformation)
Information Security Programme Lead (Security Transformation)
Robert Half are supporting a global consulting firm to source an experienced Information Security Programme Lead to join a high-profile Security Transformation programme within a complex environment. This is a senior, CISO-facing role focused on delivering and maturing security capabilities across people, process, and technology, not just deploying tools.
Assignment Details
- Initial contract length: 6 months (likely extension)
- Location: Leeds (2–3 days onsite per week)
- Start date: ASAP (2–3 week onboarding)
- Engagement: c. £600–£700 p/day via FCSA accredited umbrella company
Role Overview
You will be responsible for leading the end-to-end delivery of a broad Information Security Transformation programme, operating across multiple delivery towers and squads. The role combines programme leadership with hands-on understanding of security domains, ensuring initiatives deliver measurable improvements in security maturity aligned to frameworks such as NIST. You will work closely with the CISO and senior stakeholders to drive roadmap delivery, operationalise security services, and embed sustainable processes and governance.
Key Responsibilities
- Lead delivery of a multi-stream Information Security Transformation programme across multiple technology towers
- Develop and execute the Security Transformation Roadmap aligned to business and security strategy
- Drive programme governance, planning, RAID management, and stakeholder reporting at senior level
- Manage delivery across multiple squads, ensuring Agile ceremonies, backlog management, and delivery cadence are effective
- Coordinate cross-functional teams spanning IAM (SailPoint), PAM, cloud security, data protection, and risk/control functions
- Oversee implementation and optimisation of security controls, ensuring real risk reduction and operational effectiveness
- Embed NIST-aligned practices across Identify, Protect, Detect, Respond, Recover domains
- Drive process, policy, and governance improvements to support a scalable security operating model
- Develop and track KPIs and metrics to measure security maturity, adoption, and risk posture
- Collaborate with Security Operations, GRC, Architecture, and wider IT to ensure alignment and integration
- Manage delivery risks, dependencies, and resource planning across programmes and delivery towers
- Build and lead high-performing delivery teams, including IT Delivery Managers and Security Analysts
Experience Required
- Proven experience leading large-scale Information Security or Security Transformation programmes
- Strong exposure across IAM (SailPoint), PAM, cloud security, and data protection domains
- Experience delivering against NIST or similar security frameworks
- Track record of improving security maturity across people, process, and technology
- Strong understanding of security controls and how they are implemented and operationalised
- Experience managing multiple delivery squads within Agile environments
- Ability to operate at CISO and senior leadership level
- Strong stakeholder management, governance, and communication skills
Qualifications (Desirable)
- CISSP, CISM, CRISC or similar
- Agile / Delivery certifications (SAFe, Scrum, Prince2, PMP)
- Cloud or security certifications (Azure, AWS, Microsoft Security, Identity platforms)
If successful, you will be required to complete standard financial and criminal background checks, along with references.