Head of Cyber & Information Security

JR United Kingdom; Worcester; On-site; GBP 80,000 - 120,000; Full time

Job summary

Une entreprise en pleine croissance recherche un Head of Cyber & Information Security pour un rôle clé dans sa stratégie de cybersécurité. Vous travaillerez directement avec les équipes produit et d'ingénierie pour intégrer des solutions de sécurité robustes tout en soutenant l'innovation. Nous recherchons un leader expérimenté, capable d'équilibrer sécurité et développement rapide tout en dirigeant une petite équipe.

Qualifications

• Expérience en cybersécurité au niveau senior, de préférence avec un arrière-plan en ingénierie de sécurité.
• Connaissance des normes ISO 27001 et NIST CSF.
• Compréhension approfondie des réglementations sur la protection des données.

Responsibilities

• Intégrer la sécurité dans les cycles de développement logiciel.
• Diriger l'évaluation et la gestion des risques de sécurité.
• Assurer la conformité avec ISO 27001 et d'autres réglementations.

Skills

System security

Risk management

Compliance

Security engineering

Cybersecurity regulations

Threat modeling

Team leadership

Education

CISSP certification

CISM certification

Job description

Social network you want to login/join with:

Head of Cyber & Information Security, worcester

col-narrow-left

Client:

LT Harper - Cyber Security Recruitment

Location:

worcester, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

10.06.2025

Expiry Date:

25.07.2025

col-wide

Job Description:

Head of Cyber and Information Security

UK Residents only - Sponsorship NOT provided.

This is a rare chance to step into a hands-on leadership role at a high-growth company tackling one of the most complex, high-impact problems in cybersecurity today — one that affects businesses around the world.

You’ll work with sharp, curious people who value deep thinking, real collaboration, and building with purpose.

As Head of Cyber & Information Security, you won’t just be ensuring framework compliance and writing policies, far from it — you’ll be deep in the tech, working directly with engineers and product teams to keep things secure by design without compromising innovation.

What You’ll Be Doing:

• Work directly with Product and Engineering to embed practical security into the SDLC and protect production environments.
• Champion a security-first mindset across the business — educate and empower teams to own security at every level.
• Run detailed threat modelling and ongoing risk assessments — spot vulnerabilities before they become problems.
• Own and tune security configurations across devices, cloud infra, and SaaS tools — always balancing usability and protection.
• Lead development and evolution of the ISMS, ensuring we stay aligned with ISO 27001 and Cyber Essentials (and scale beyond).

What We’re Looking For:

• Senior-level experience in Information and cyber Security ideally with a security engineering background.
• Hands-on approach — you’re comfortable rolling up your sleeves and digging into tooling, architecture, and implementation.
• Solid understanding of attacker TTPs and how to design effective, scalable defenses.
• Experience with ISO 27001, NIST CSF, SP 800-53, Cyber Essentials, or similar frameworks.
• Deep knowledge of UK and global data protection and cybersecurity regulations.
• Certifications like CISSP, CISM, or similar are a strong plus.
• You strike the right balance between securing systems and enabling fast-paced product development.
• This is very much a team role, with 2 direct reports