Head of Cyber Risk Consulting

LGBT Great; Greater London; Hybrid; GBP 140,000 - 190,000; Full time

Benefits offered by this job

Discretionary annual bonus

Life assurance 4x salary

Income protection 75% of salary

Private medical insurance

Generous pension scheme

25 days leave (27 after 5 years)

Job summary

Howden Group is seeking a Head of Cyber Risk Consulting to lead the Cyber Risk Consulting practice within Howden Risk Advisory, based in London with hybrid flexibility. The role drives strategy, growth, and performance of the team, delivering high-quality client outcomes and exploring opportunities to expand resilience capabilities and risk transfer strategies.

The successful candidate will oversee revenue, profitability, and utilisation targets, while developing the team, shaping service lines,

Qualifications

• Demonstrated leadership of professional services or advisory teams.
• Proven ability to grow service lines and drive revenue growth.
• Experience leading cyber risk, information security, or resilience programs.

Responsibilities

• Set strategic direction for Cyber Risk Consulting and drive growth.
• Lead workforce planning, talent development, and thought leadership.
• Evolve risk service offerings and align with Risk & Resilience strategy.
• Drive cross-sell of wider Howden services and new offerings.
• Advise clients at executive levels and translate risk into business outcomes.
• Support frameworks and regulatory requirements like ISO/NIST.

Skills

Leadership

Strategy development

People development

Business development

Stakeholder engagement

Client advisory

Education

Degree in Information Security or Risk Management

Tools

ISO 27001

ISO 22301

NIST CSF

Job description

We have an exciting opportunity for a Head of Cyber Risk Consulting to lead our Cyber Risk Consulting practice and play a key role within the Howden Risk Advisory (HRA) leadership team, ideally based from our London office (hybrid working with flexibility).

As Head of Cyber Risk Consulting, you will drive the strategy, growth, service development, and performance of the Cyber Risk team; ensuring the delivery of high-quality client outcomes while identifying new opportunities to enhance resilience capabilities, support risk transfer strategies and drive commercial growth.

A snapshot of your day:

• Lead the Cyber Risk Consulting function, setting strategic direction and driving the delivery of high-quality, commercially sustainable services. Accountable for revenue, profitability, growth and utilisation targets, while building and developing a high-performing team and fostering a culture of collaboration, innovation, accountability and continuous improvement
• Lead workforce planning, talent development and succession activities, and represent Howden through thought leadership, industry engagement, publications, events and market-facing initiatives.
• Develop and evolve the existing risk service offerings, including Information Security, Cyber Security, Operational Resilience, Business Continuity, Third-Party Risk Management, Data Protection and Technology Risk, ensuring alignment with the wider Risk & Resilience strategy and market demand.
• Drive commercial growth through proposition development, business development, solution design, strategic client engagement, cross-collaboration to introduce broader Howden services, and offer new service offerings to meet changing client challenges, e.g. AI risk tools
• Act as a trusted advisor to clients, providing strategic guidance and leading complex engagements, resilience programmes, maturity assessments, and strategic risk initiatives across cyber risk, information security, and operational resilience matters, while translating technical risks into practical business outcomes for senior stakeholders and Boards.
• Support clients in implementing and enhancing recognised frameworks and standards, including ISO 27001, ISO 22301, Cyber Essentials, NIST CSF and relevant regulatory requirements.
• Develop referral pathways and collaborative opportunities across advisory, consulting, broking and insurance teams to maximise client value, solutions for clients and business growth.
• Share market intelligence, regulatory developments and emerging risk trends to support service development and client value creation.
• Maintain governance, quality and performance standards across all service delivery, ensuring regulatory compliance, continuous improvement and the achievement of business objectives through robust reporting, resource management and market insight.
• Establish and monitor KPIs, SLAs and performance measures to support service excellence and business objectives and provide regular reporting on operational performance, financial results, resource utilisation, pipeline development and strategic objectives.
• Monitor developments in cyber threats, technologies, regulation and resilience practices to inform strategic decision-making and service evolution.

We would love to hear from you if you have:

• Demonstrable leadership and strategic management experience; leading professional services, consulting, or advisory teams with coaching, and people development capabilities
• Degree or equivalent professional experience in Information Security, Risk Management, Technology, or a related discipline.
• Proven ability to develop service lines and drive growth within a commercial environment.
• Digital resilience expertise with significant experience in Information Security, Cyber Security, Operational Resilience, Business Continuity, or Technology Risk.
• Excellent understanding of information security risk management and control frameworks
• Experience supporting organisations through resilience, security, and governance transformations.
• Practical experience of standards such as ISO 27001, ISO 22301, Cyber Essentials, NIST, or equivalent frameworks.
• Demonstrable client and commercial management experience; with excellent client relationship management and stakeholder engagement skills and experience presenting to Executive Committees, Boards, and senior leadership teams.
• Demonstrable success in supporting business development, proposal production, and revenue growth.
• Experience working across regulated and non-regulated sectors (e.g. financial services, healthcare, technology, public sector, retail)

Desirable but not essential:

• Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, CBCI, MBCI, or equivalent Business Continuity qualification
• Relevant resilience, risk, governance, or cyber security certifications.
• AI risk experience

What's in it for you:

• Competitive discretionary annual bonus.
• Core benefits including life assurance of four times salary, income protection of 75% of salary for up to five years, and single private medical insurance cover.
• A generous pension scheme
• 25 days' annual leave, increasing to 27 days after five years' service.
• Access to the Howden flexible benefits programme, offering a wide range of benefits and discounts to support your wellbeing, family life and lifestyle.
• The opportunity to be part of a growing global business where career development, collaboration and innovation are encouraged.

Accessibility:

If you require reasonable adjustments or want more information on accessibility, please let us know.