Head of Cyber & Information Security

JR United Kingdom; Watford; On-site; GBP 80,000 - 120,000; Full time

Job summary

A leading company in cybersecurity is seeking a Head of Cyber & Information Security. This hands-on leadership role involves collaborating with product and engineering teams, managing security configurations, and ensuring compliance with frameworks like ISO 27001. The ideal candidate will possess senior-level experience, a strong understanding of cybersecurity regulations, and relevant certifications such as CISSP or CISM.

Qualifications

• Senior-level experience in Information and Cyber Security with a security engineering background.
• Understanding of attacker TTPs and defense design.
• Deep knowledge of data protection and cybersecurity regulations.

Responsibilities

• Embed security into the SDLC and protect production environments.
• Champion a security-first mindset across the business.
• Run threat modelling and ongoing risk assessments.

Skills

Information Security

Cyber Security

Risk Assessment

Threat Modelling

IT Security Engineering

Education

CISSP

CISM

Job description

Social network you want to login/join with:

Head of Cyber & Information Security, watford, hertfordshire

col-narrow-left

Client:

LT Harper - Cyber Security Recruitment

Location:

watford, hertfordshire, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

10.06.2025

Expiry Date:

25.07.2025

col-wide

Job Description:

Head of Cyber and Information Security

UK Residents only - Sponsorship NOT provided.

This is a rare chance to step into a hands-on leadership role at a high-growth company tackling one of the most complex, high-impact problems in cybersecurity today — one that affects businesses around the world.

You’ll work with sharp, curious people who value deep thinking, real collaboration, and building with purpose.

As Head of Cyber & Information Security, you won’t just be ensuring framework compliance and writing policies, far from it — you’ll be deep in the tech, working directly with engineers and product teams to keep things secure by design without compromising innovation.

What You’ll Be Doing:

• Work directly with Product and Engineering to embed practical security into the SDLC and protect production environments.
• Champion a security-first mindset across the business — educate and empower teams to own security at every level.
• Run detailed threat modelling and ongoing risk assessments — spot vulnerabilities before they become problems.
• Own and tune security configurations across devices, cloud infra, and SaaS tools — always balancing usability and protection.
• Lead development and evolution of the ISMS, ensuring we stay aligned with ISO 27001 and Cyber Essentials (and scale beyond).

What We’re Looking For:

• Senior-level experience in Information and cyber Security ideally with a security engineering background.
• Hands-on approach — you’re comfortable rolling up your sleeves and digging into tooling, architecture, and implementation.
• Solid understanding of attacker TTPs and how to design effective, scalable defenses.
• Experience with ISO 27001, NIST CSF, SP 800-53, Cyber Essentials, or similar frameworks.
• Deep knowledge of UK and global data protection and cybersecurity regulations.
• Certifications like CISSP, CISM, or similar are a strong plus.
• You strike the right balance between securing systems and enabling fast-paced product development.
• This is very much a team role, with 2 direct reports