CISO

Tria; City Of London; On-site; GBP 140,000 - 150,000; Full time

Job summary

A leading building & construction company is seeking a CISO to define and evolve cybersecurity strategies in a hybrid setting. The ideal candidate will have extensive experience in cybersecurity within regulated environments and will support operational resilience and business continuity. This strategic role offers a competitive package of £140k-£150k plus bonuses and benefits.

Benefits

Bonus

Car allowance

Qualifications

• Previous experience in a senior cybersecurity role.
• Experience in a heavily regulated environment like financial services.
• Solid understanding of legal and regulatory frameworks.

Responsibilities

• Define and maintain cybersecurity strategies.
• Support resilience and continuity practices.
• Ensure protection against evolving cyber threats.
• Align security practices with laws and regulations.
• Lead InfoSec teams towards achieving goals.

Skills

Senior cybersecurity experience

Knowledge of PRA regulation

Operational Resilience expertise

Cloud and SaaS environments

Vendor and contract negotiations

Excellent communication skills

Tools

ISO/IEC 27001

ITIL

COBIT

Job description

Position: CISO

Location: Hybrid - 2 days per week in Milton Keynes or London

Employment Status: Full-Time, Permanent

Package: 140k-150k + bonus + car allowance

Industry: Building & Construction

Tria has partnered with a leading company in the building & construction industry to hire a CISO. This is a strategic leadership role responsible for defining, implementing, maintaining and evolving the firm's information/cybersecurity strategies.

As part of the position, you will support the CDTO across Operational Resilience and Business Continuity practices to ensure that systems, processes, and people are prepared for disruptions. The role plays a critical part in ensuring information assets, systems, processes, third parties and partners are adequately protected against evolving cyber threats and that firm practices remain aligned with relevant laws, regulations (including PRA, FCA, GCPR, UK DPA, etc).

Key Responsibilities:

• Define, implement and maintain the firm's information/cybersecurity strategy.
• Support the CDTO across Operational Resilience and Business Continuity practices.
• Ensure information assets, systems and processes are protected against cyber threats.
• Align security practices with relevant laws and regulations (PRA, FCA, UK DPA, GCPR).
• Lead and motivate InfoSec teams to achieve goals.

Required Experience and Skills:

• Previous experience and success in a senior cybersecurity position.
• Experience working with modern cloud and SaaS-based environments.
• Experience with legacy system migration.
• Experience in a heavily regulated environment such as financial services or insurance, with knowledge of PRA regulation.
• Good knowledge of Operational Resilience.
• Solid understanding of relevant legal, regulatory and security frameworks (PRA, CBEST, ISO/IEC 27001, ITIL, COBIT).
• Experience with vendor and contract negotiations.
• Excellent communicator and stakeholder management skills.

This is a great opportunity to join a brownfield cybersecurity project and shape robust cybersecurity practices for the company.

Please apply ASAP with an up-to-date CV showcasing your experience in the above areas.

CISO, Cybersecurity, legacy, cloud, SaaS, PRA, financial services, insurance, operational resilience, CBEST, ISO/IEC 27001, ITIL, COBIT, information security, Head of Cyber, CIO