CISO

CISO - c£180,000 - Hybrid (3x week in London)

Overview:
As the Chief Information Security Officer (CISO), you will be responsible for shaping and executing the company's security strategy in line with industry best practices and regulatory requirements. You will collaborate closely with various departments to assess risks, create preventative measures, and ensure regulatory compliance across the company's infrastructure and cybersecurity initiatives.

This role presents a fantastic opportunity for a seasoned security leader to play a key role in advancing the company's security agenda. Our client provides an inclusive and collaborative work culture that values and leverages your expertise.

Role Responsibilities:

• Conduct regular security audits and risk assessments to identify vulnerabilities and ensure compliance with relevant regulations.
• Implement and manage security technologies, like firewalls, intrusion detection systems and access controls.
• Ensure the organisation's compliance with applicable security-related laws, regulations and standards.
• Monitor security systems and networks for potential threats, promptly investigating and mitigating security incidents.
• Oversee the management of physical security measures, including access controls, CCTV systems, and security personnel.
• Develop and maintain incident response plans, ensuring timely and effective responses to security breaches.
• Manage records, documentation and reporting to demonstrate compliance and facilitate audits.
• Collaborate with internal teams to integrate security considerations into developing new products and services.
• Stay updated with the latest security trends, technologies and regulatory changes, ensuring continuous improvement of the security function.

Essential Skills and Experience:

• A bachelor's degree in computer science, information security or a related field.
• Relevant certifications such as CISSP, CISM, or CRISC.
• 7+ years of experience in a senior security management role, with a demonstrable track record of developing and implementing security strategies and frameworks.
• Excellent knowledge of applicable laws, regulations, and industry standards related to infrastructure security in an organisation.
• Deep understanding of cybersecurity, data protection regulations and industry best practices.
• Strong leadership and communication skills, with the ability to collaborate effectively with cross-functional teams and senior management.
• Analytical mindset and strong problem-solving skills to assess risks, analyse complex security issues and develop appropriate solutions.
• Up-to-date knowledge of emerging security threats, trends and technologies.
• Experience in conducting security audits, risk assessments and managing incident response processes.
• Knowledge of security frameworks, such as ISO 27001 and NIST Cybersecurity Framework.