Chief Information Security Officer

Levrara Consulting Group; Greater London; On-site; GBP 150,000 - 230,000; Full time

Job summary

Levrara Consulting Group in London is seeking a Chief Information Security Officer (CISO) to lead its global information and cyber security strategy. The role demands senior leadership, ownership of security governance, risk and resilience, and collaboration with executive management and regulatory bodies.

The successful candidate will define and deliver a comprehensive security program, align controls across cloud, on‑premise, and hybrid environments, and drive a strong security culture across

Qualifications

• Significant experience in a senior information security or cyber security leadership role.
• Extensive background in financial services or regulated environments.
• Proven ability to define and execute enterprise-level security strategies.
• Strong knowledge of regulatory expectations for cyber and information security.
• Broad technical understanding across cloud, infrastructure, applications, identity and access management, vulnerability management and security operations.
• Experience managing major security incidents and developing effective incident response frameworks.

Responsibilities

• Define and lead the organisation’s global information and cyber security strategy.
• Act as the senior authority for information security, cyber risk and resilience across the business.
• Develop and maintain an effective security governance framework, policies and controls.
• Provide strategic security advice to executive leadership and senior stakeholders.
• Oversee cyber risk assessments, security monitoring, incident management and threat response.
• Ensure appropriate security controls are embedded across infrastructure, applications, cloud environments and technology platforms.
• Lead security architecture, vulnerability management, penetration testing and third-party security oversight.
• Maintain and enhance incident response, business resilience and cyber recovery capabilities.
• Work closely with Risk, Compliance, Technology and other control functions to manage information security risk.
• Support regulatory engagements, audits and security assurance activities.
• Ensure security standards remain aligned with relevant regulatory requirements and industry frameworks.
• Build a strong security culture across the organisation through awareness, governance and effective stakeholder engagement.
• Lead and develop internal security capability and manage specialist external security partners where required.

Skills

Senior leadership

Enterprise security

Regulatory compliance

Stakeholder management

Cyber risk management

Cloud security

Job description

Chief Information Security Officer (CISO)

London

Full-Time

We are working with a highly innovative financial services organisation to appoint a Chief Information Security Officer (CISO) to lead its global information and cyber security strategy.

This is a senior leadership opportunity for an experienced security executive to take ownership of the organisation’s security framework, cyber resilience and information security programme, working closely with executive management, technology leadership, risk and regulatory stakeholders.

The successful candidate will be responsible for defining and delivering the firm’s security strategy, ensuring the organisation remains resilient against an evolving threat landscape while supporting continued business growth and technological development.

Key Responsibilities

• Define and lead the organisation’s global information and cyber security strategy.
• Act as the senior authority for information security, cyber risk and resilience across the business.
• Develop and maintain an effective security governance framework, policies and controls.
• Provide strategic security advice to executive leadership and senior stakeholders.
• Oversee cyber risk assessments, security monitoring, incident management and threat response.
• Ensure appropriate security controls are embedded across infrastructure, applications, cloud environments and technology platforms.
• Lead security architecture, vulnerability management, penetration testing and third-party security oversight.
• Maintain and enhance incident response, business resilience and cyber recovery capabilities.
• Work closely with Risk, Compliance, Technology and other control functions to manage information security risk.
• Support regulatory engagements, audits and security assurance activities.
• Ensure security standards remain aligned with relevant regulatory requirements and industry frameworks.
• Build a strong security culture across the organisation through awareness, governance and effective stakeholder engagement.
• Lead and develop internal security capability and manage specialist external security partners where required.

Candidate Profile

• Significant experience operating in a senior information security or cyber security leadership position.
• Strong experience within financial services, banking, capital markets, fintech or another highly regulated environment.
• Proven experience developing and executing enterprise-level cyber and information security strategies.
• Strong understanding of cyber risk management, security governance and operational resilience.
• Broad technical understanding across cloud security, infrastructure security, application security, identity and access management, vulnerability management and security operations.
• Experience managing major security incidents and developing effective incident response frameworks.
• Strong understanding of regulatory expectations relating to cyber security, information security and technology risk.
• Experience engaging with executive committees, boards, regulators and other senior stakeholders.
• Commercial and pragmatic approach, with the ability to balance security requirements against business objectives.
• Excellent leadership, communication and stakeholder management skills.

Relevant professional qualifications such as CISSP, CISM, CRISC or equivalent would be advantageous.

This is an opportunity to take ownership of the security function within a sophisticated, technology-led financial services organisation and play a key role in shaping its future security and resilience strategy.