Chief Information Security Officer

Secure Trust Bank; Cardiff; On-site; GBP 150,000 - 200,000; Full time

Job summary

A financial services firm in Cardiff is seeking a Chief Information Security Officer to lead their information security strategy and governance. This pivotal role involves shaping the security framework, ensuring compliance with regulations, and developing a high-performing team. Candidates should have significant experience in a similar capacity and familiarity with industry standards such as ISO/IEC 27001/2 and NIST. The firm provides a supportive working culture with competitive compensation and flexible arrangements.

Benefits

Competitive salary and benefits package

Flexible working arrangements

Diverse and inclusive workplace

Qualifications

• Previous experience as a Chief Information Security Officer or similar senior leadership role.
• Deep knowledge of industry standards such as ISO/IEC 27001/2, NIST, COBIT, and PCI DSS.
• Proven track record in developing and managing successful Information Security programmes.

Responsibilities

• Design and deliver a robust Information Security strategy across the organization.
• Establish governance frameworks ensuring compliance with FCA, PRA, and internal standards.
• Lead risk assessments and proactively identify emerging threats and trends.

Skills

Strategic thinking

Leadership capability

Technical expertise

Education

Degree or relevant professional qualification

Tools

ISO/IEC 27001/2

NIST

COBIT

PCI DSS

Job description

About The Role

Secure Trust Bank Group (STBG) is looking for a strategic and experienced Chief Information Security Officer to lead our enterprise-wide security strategy and governance. This is a high-impact role, offering the opportunity to shape the future of information security across our organisation, protect our critical assets, and influence Board-level decision-making.

What You'll Do

As our Chief Information Security Officer, you'll be the trusted advisor to the Board and Executive Leadership, responsible for:

• Designing and delivering a robust Information Security strategy across STBG.
• Establishing governance frameworks that ensure compliance with FCA, PRA, and internal standards.
• Leading risk assessments and proactively identifying emerging threats and trends.
• Embedding a strong security culture through awareness programmes and policy development.
• Empowering and developing a high-performing Information Security team.
• Reporting and communicating security risks and controls to senior stakeholders.

What You\'ll Bring

We\'re looking for someone with a strong blend of technical expertise, strategic thinking, and leadership capability. Ideally, you\'ll have:

• Previous experience as a Chief Information Security Officer (CISO) or similar senior leadership role.
• Deep knowledge of industry standards such as ISO/IEC 27001/2, NIST, COBIT, and PCI DSS.
• Proven track record in developing and managing successful Information Security programmes.
• Experience in highly regulated industries - Financial Services preferred.
• Strong understanding of IT architectures, systems design, and governance.
• Familiarity with relevant legislation including the Data Protection Act and Computer Misuse Act.
• Experience managing senior-level internal and external relationships, including large-scale IT outsourcing.
• A degree or relevant professional qualification - or equivalent experience.

Why Join Us?

At STBG, we\'re committed to building a diverse and inclusive workplace where everyone feels valued and supported. We offer:

• A culture of trust, transparency, and collaboration.
• Opportunities to shape strategy and make a real impact.
• Competitive salary and benefits package.
• Flexible working arrangements and a supportive environment.