CISO: Lead Cyber Strategy (Hybrid)

The Methodist Church in Britain; Manchester; Hybrid; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Civil Service Pension

Hybrid working

Volunteering leave

Flexible working

Employee Assistance Programme

Learning and development

Professional memberships paid

Job summary

The Public Service Ombudsman seeks a Head of Cyber Security to set the cyber strategy, lead security operations and direct incident response. The role blends strategic oversight with hands-on work across vulnerabilities and secure service design, with hybrid working and regular presence in Manchester or London offices.

The postholder will act as Chief Information Security Officer, shaping security controls, advising senior leaders and ensuring secure development practices across digital services

Qualifications

• Experience building effective security capabilities.
• Experience holding suppliers to account.
• Strategic governance and security operations leadership.

Responsibilities

• Set the organisation's cyber security approach and strategy.
• Oversee day-to-day security operations.
• Lead the response to significant security incidents.
• Manage vulnerabilities across digital services and cloud platforms.
• Review security controls across systems and services.
• Ensure security is considered in new services and systems development.
• Collaborate with architecture, engineering, product and delivery teams.
• Balance cyber risk with priorities and resources.
• Develop the organisation's cyber security capability.
• Promote good security practice across the organisation.
• Provide cyber security guidance to senior leaders.
• Act as the organisation's Chief Information Security Officer.

Skills

Leadership

Risk management

Ownership & accountability

Clear communication

Job description

The Public Service Ombudsman seeks a Head of Cyber Security to set the cyber strategy, lead security operations and direct incident response. The role blends strategic oversight with hands-on work across vulnerabilities and secure service design, with hybrid working and regular presence in Manchester or London offices.

The postholder will act as Chief Information Security Officer, shaping security controls, advising senior leaders and ensuring secure development practices across digital services