Group Deputy CISO - Operations

Compass Group PLC; Chertsey; On-site; GBP 90,000 - 120,000; Full time

Job summary

A global food service company is looking for a Group Deputy CISO - Operations to lead the cyber security operations and protect digital environments. The role requires expertise in managing Security Operations Centre and incident response strategies. Ideal candidates should have a degree in information security, professional certifications, and strong leadership skills. This position offers a key opportunity to influence security policies and foster a collaborative cyber security culture.

Qualifications

• Bachelor's or master's degree in information security, computer science, or a related field is desirable.
• Professional security management certification, such as CISSP, CISM, or equivalent, is desirable.
• Experience in managing relationships with third-party security vendors.

Responsibilities

• Lead security operations and manage the Security Operations Centre (SOC).
• Develop incident response strategies for timely security incident management.
• Oversee vulnerability management and threat exposure programmes.

Skills

Leadership of high-performing teams

Incident response proficiency

Analytical skills

Communication skills

Collaboration with stakeholders

Education

Bachelor's or master's degree in information security, computer science, or related field

Professional security management certification (CISSP, CISM)

Tools

SIEM

SOAR

EDR

Vulnerability scanning tools

Job description

The Group Deputy CISO - Operations plays a critical leadership role in safeguarding Compass Group's global digital environment. Reporting to the Group CISO, this role is responsible for directing cyber security operations and engineering to protect IT infrastructure, cloud environments, and data assets across the enterprise. This position provides strategic oversight of the Security Operations Centre (SOC) and threat detection capabilities, leads the incident response and vulnerability management programmes, and drives the optimisation of security technologies and automation. This position also plays a key role in shaping internal security policies, standards and control frameworks. Success in this role requires expertise in cyber security operations, strong leadership of high-performing teams, and the ability to collaborate effectively with senior stakeholders, technology teams, and external partners.

Responsibilities

• Provide leadership for security operations, ensuring effective management of Security Operations Centre (SOC) and Managed Detection & Response (MDR) services. Oversee threat detection, monitoring, and incident response capabilities, ensuring operational excellence and continuous improvement.
• Develop the incident response strategy, ensuring robust processes for timely detection, triage, containment, and recovery from security incidents. Oversee collaboration with internal teams and external partners, and provide executive-level visibility on incident impact and response effectiveness.
• Lead the enterprise vulnerability management and threat exposure programme, ensuring proactive identification, assessment, and remediation of risks through vulnerability scanning, patch management, penetration testing, and threat monitoring.
• Drive the adoption of automation and orchestration within security operations to enhance efficiency, reduce response times, and improve scalability. Champion the use of automation for alert triage, enrichment, reporting and incident response workflows.
• Establish and oversee a comprehensive set of security operations metrics and reporting. Provide actionable insights and regular reporting to senior leadership on threat trends, incident response performance, tooling effectiveness, and service provider performance.
• Input to the development and continual improvement of security policies, standards, and control frameworks.
• Provide leadership and mentorship to the Cyber Security Team. Foster a high-performing, collaborative culture focused on innovation and continuous professional development.
• Collaborate with Group and market cyber security, IT, business units and external partners to enhance security awareness and compliance. Serve as a key advisor to senior management on cyber security operations and engineering.

Qualifications

• Bachelor's or master's degree in information security, computer science, or a related field is desirable.
• Professional security management certification, such as CISSP, CISM, or equivalent, is desirable.
• Strong background in managing Security Operations Centre (SOC) and leading incident response efforts.
• Experience in managing relationships with third-party security vendors and providers, ensuring value delivery and operational efficiency.
• Familiarity with security tools such as SIEM, SOAR, EDR, and vulnerability scanning.
• Strong analytical and problem-solving skills, with attention to detail.
• Ability to communicate technical issues clearly to both technical and non-technical audiences.
• Knowledge of security frameworks and standards (e.g. ISF, NIST, ISO 27001).
• Strong understanding of regulator requirements and compliance issues affecting cyber security.
• Excellent communication, leadership, and decision-making skills.
• Proficiency in English language.