Deputy CISO & Security Strategy Lead

newday; Greater London; On-site; GBP 120,000 - 190,000; Full time

Job summary

NewDay is seeking a Deputy Chief Information Security Officer to shape and strengthen our enterprise-wide security capability. Reporting to the CISO, you will be the senior operational leader for information security and the principal deputy, translating strategy into clear priorities and measurable outcomes.

You will represent security at senior forums, provide insight on cyber risk, and ensure alignment with risk appetite, regulatory responsibilities and commercial ambitions across security

Qualifications

• Experience leading a broad Information Security function in a regulated organisation.
• Senior deputy to a CISO or equivalent enterprise security leadership role.
• Experience across security operations, governance, risk and compliance.
• Strong knowledge of ISO/IEC 27001, PCI DSS, UK GDPR and the Data Protection Act 2018.
• Understanding of technology risk, risk appetite and operational resilience.
• Experience leading security incidents, audits, assurance programmes and regulatory engagement.
• Professional certifications such as CISSP, CISM, CRISC or CISA.

Responsibilities

• Lead, develop and unite NewDay's Information Security teams with clear priorities and a high-performing culture.
• Act as the CISO's delegate across executive, risk, governance, customer, supplier and regulatory forums.
• Translate security strategy into actionable priorities and measurable outcomes.
• Maintain ISMS and alignment with ISO/IEC 27001:2022, NIST CSF and other recognised standards.
• Oversee security operations, monitoring, threat and vulnerability management, and incident response.
• Drive secure-by-design delivery with technology and engineering leaders.

Skills

Security leadership

Regulated environment

ISO/IEC 27001

PCI DSS

UK GDPR

NIST

Risk management

Job description

NewDay is seeking a Deputy Chief Information Security Officer to shape and strengthen our enterprise-wide security capability. Reporting to the CISO, you will be the senior operational leader for information security and the principal deputy, translating strategy into clear priorities and measurable outcomes.

You will represent security at senior forums, provide insight on cyber risk, and ensure alignment with risk appetite, regulatory responsibilities and commercial ambitions across security