Chief Information Security Officer

SF Technology Partners; Birmingham; On-site; GBP 150,000 - 220,000; Full time

Job summary

SF Technology Partners is engaged to source a Chief Information Security Officer for a rapidly growing technology and services business. The CISO will shape security strategy across cloud, products and customer-facing services, aligning security with growth and product development.

The role demands experience at senior leadership level, a pragmatic, commercial approach, and the ability to engage with enterprise customers and their security teams while driving data protection and governance

Qualifications

• Open to established CISOs or senior security leaders transitioning to a Chief Information Security Officer role.
• Strong track record in cloud security and product/security across complex environments.
• Experience applying security maturity frameworks and data protection requirements.

Responsibilities

• Define and lead the organisation’s cyber and information security strategy and roadmap.
• Lead security across cloud-hosted products and environments.
• Oversee product and application security, secure development, APIs and integrations.
• Embed security by design with technology, architecture and product teams.
• Act as senior security contact for major enterprise customers and their security teams.
• Assume data protection and DPO responsibility within the organisation.
• Develop security maturity using major recognised frameworks.
• Oversee third-party and outsourced security/SOC capabilities.
• Support the organisation as it enters new markets and scales.
• Provide clear security, risk and investment reporting at executive/board level.

Skills

Cloud security experience

Product security

Application security

Security maturity frameworks

Data protection / DPO

Enterprise client experience

Engaging with security leadership

Security capability building

Commercial risk trading off security

Job description

Chief Information Security Officer (CISO)

SF Technology Partners has been appointed to source a Chief Information Security Officer for a highly successful, fast-growing technology and services business.

This is a senior leadership role within a business that has grown significantly and is continuing to invest in its digital products, technology and wider operating capability. The business provides operational expertise and technology-enabled services that help large, complex organisations improve efficiency & performance.

As its products and services become increasingly embedded within customers’ operations, cyber security, information security and data protection have become strategically important not only internally, but also to the confidence potential customers place in the company.

The opportunity

The CISO will define and lead the security strategy for the next phase of growth, working across corporate technology, digital products, cloud environments and customer-facing services.

The remit will include:

• Developing and delivering the organisation’s cyber and information security strategy and roadmap
• Security leadership across Cloud-hosted products and cloud environments
• Product and application security, secure development, APIs and integrations
• Working with technology, architecture and product teams to embed security by design
• Acting as a senior security contact for major enterprise customers and their CISO/security teams
• Data protection and DPO responsibility
• Developing security maturity using major recognised frameworks
• Oversight of third-party and outsourced security/SOC capability
• Supporting the organisation as it enters new markets and continues to scale
• Providing clear security, risk and investment reporting at executive and board level

Who are we looking for?

We are open to both established CISOs and high-calibre security leaders ready to step into their first CISO appointment. You could currently be a CISO, Director/Head of Information Security, Director of Cyber Security, Head of Product Security or senior Security Engineering leader.

We are particularly interested in people who can demonstrate:

• Strong cloud security experience
• Product/software and application security
• Broader security maturity frameworks
• Data protection / DPO experience
• Experience within large scale complex enterprise clients
• The credibility to engage directly with sophisticated enterprise customers and their security leadership
• Experience building or scaling security capability
• A pragmatic, commercial approach to balancing security, technology and growth

This is not a compliance-only security role. We are looking for someone who understands how security can enable product development, customer confidence and commercial growth.

The successful individual will join the leadership team and have the opportunity to shape security within an ambitious business at an important point in its development.

Due to the confidential nature of the appointment, further information on the company and opportunity will be shared with suitable candidates following an initial conversation.