Chief Information Security Officer (CISO)

Testronic; Croydon; On-site; GBP 150,000 - 230,000; Full time

Job summary

Testronic is seeking a Chief Information Security Officer to lead its global information and cyber security programme. You will define the security strategy, govern risk, and report to the Board on cyber risk, resilience and compliance.

The role requires senior leadership, broad security knowledge across cloud, infrastructure, applications, and product security, and the ability to work with executives and external stakeholders to embed security into business decisions.

Qualifications

• Senior-level information and cyber security experience required.
• Experience advising Boards or senior governance committees.
• Knowledge of UK legal, regulatory and contractual requirements.

Responsibilities

• Define and deliver the global information security strategy.
• Oversee governance, risk management, and policy frameworks.
• Provide Board-level reporting on cyber risk, posture, and incidents.
• Lead incident management and executive-level crisis response.
• Oversee security programmes across technology, cloud, apps and third parties.
• Ensure compliance with ISO 27001 and other standards.
• Partner with IT, Legal, HR, Finance and operations to embed security decisions.

Skills

Leadership

Governance

Risk management

Board reporting

Budget management

Security strategy

Stakeholder management

Tools

ISO 27001

Security frameworks

Cloud security

Job description

Testronic is a global leader in Quality Assurance and technology services for the games and entertainment industries. We work with some of the world’s leading game developers and publishers, providing Functional QA, Compliance QA, Localization QA, Compatibility QA, and other specialized services.

With diverse teams across Europe, Asia, and North America, we foster an inclusive, collaborative culture built on four core values: We Care Deeply, Passion for Quality, Trust in Unity, and Pride in Ownership. Whether you’re starting your career or looking for your next challenge, Testronic offers opportunities to learn, grow, and make a meaningful impact.

About the Role

We are looking for a Chief Information Security Officer (CISO) to lead Testronic’s information and cyber security programme at a global level.The CISO will define and deliver the security strategy, oversee enterprise security risk and governance, lead the Information Security function, and provide senior leadership and Board-level advice on cyber security, resilience and compliance.

Responsibilities:

Information Security Strategy

• Develop and deliver Testronic’s global information security strategy, aligned with business objectives, technology plans and risk appetite.

• Translate security objectives into measurable programmes, capabilities and annual priorities.

• Monitor the security landscape and adapt the strategy to emerging threats, technology and regulatory requirements.

Governance & Risk Management

• Own the global information security governance framework, policies and risk management processes.

• Ensure material security risks have clear ownership, treatment plans and appropriate escalation.

• Oversee the Information Security Management System and promote security accountability across the organisation.

Board & Senior Leadership

• Provide clear, regular reporting to the Board and senior leadership on cyber risk, security posture, incidents, compliance and resilience.

• Advise executives on significant security risks and support informed business decisions.

• Communicate complex security topics in clear business and financial terms.

Security & Incident Management

• Act as the senior escalation point for significant information security incidents.

• Lead or support executive-level response to major cyber incidents, working with IT, Legal, Privacy, Communications and business teams.

• Ensure incident response exercises, lessons learned and remediation activities are effectively managed.

Security Programme & Assurance

• Oversee security programmes covering corporate technology, cloud, applications, products and third parties.

• Provide oversight of security architecture, vulnerabilities, penetration testing, control testing and independent assurance.

• Monitor the effectiveness of internal and outsourced security services and ensure key security improvements are delivered.

Compliance & External Stakeholders

• Oversee information security requirements arising from legislation, regulations, customer contracts and recognised standards.

• Support ISO 27001 and other relevant certification and assurance programmes.

• Represent Testronic in significant security matters involving clients, auditors, regulators, insurers and other external stakeholders.

Leadership & Business Partnership

• Lead, develop and build a capable global Information Security function.

• Work closely with IT, Legal, HR, Facilities, Commercial, QA and other departments to embed security into business and technology decisions.

• Manage the security budget, strategic suppliers and major security investments.

• Ensure security risks are considered in acquisitions, outsourcing and major organisational or technology changes.

• Significant senior-level experience in information and cyber security.

• Experience developing and implementing an enterprise security strategy.

• Experience advising Boards, executives or senior governance committees.

• Strong experience in enterprise security risk management and governance.

• Experience leading security programmes across complex technology environments.

• Experience managing significant cyber security incidents or crisis situations.

• Experience leading and developing multidisciplinary security teams.

• Strong understanding of security governance, architecture, operations, assurance and operational resilience.

• Knowledge of cloud, infrastructure, identity, application and product security.

• Experience with security frameworks, ISO 27001 and third-party risk.

• Strong stakeholder, programme, budget and supplier management skills.

• Knowledge of relevant UK legal, regulatory and contractual requirements.

GOOD TO HAVE: CISSP, CISM, CCISO, ISO/IEC 27001 Lead Implementer/Lead Auditor, CRISC or equivalent qualifications.