Head of Cyber Security

Notting Hill Genesis; Greater London; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Annual leave

Pension scheme

Family leave support

Employee assistance

Cycle to work

Life Assurance x4

Job summary

Notting Hill Genesis is searching for a Head of Cyber Security to lead NHG Digital’s cyber security domain, shaping strategy, standards and assurance across services, data and suppliers. You will embed security in product design and operations, coordinating risk, incidents and resilience.

Qualifications

• Qualification to demonstrate competence may be required, per legislative changes.
• Substantial experience leading cyber security, information security, security operations or resilience in a complex or regulated environment.
• Strong knowledge of cyber security strategy, policy, controls and risk monitoring.
• Ability to explain cyber risk and residual-risk options to senior leaders and non-technical stakeholders.

Responsibilities

• Lead and maintain NHG Digital’s cyber security strategy, roadmap, policies, standards and control framework.
• Own specialist cyber security assurance across products, platforms, infrastructure, suppliers and incident response.
• Embed security requirements early in product discovery, architecture and DevOps delivery.
• Work with Digital Operations to sustain controls across patching, monitoring, backup and recovery.
• Lead cyber monitoring, threat awareness and major cyber incident response coordination.

Skills

Cyber security strategy

Risk management

Incident response

Security governance

Supplier management

Security awareness

Job description

What You’ll Do

As the Head of Cyber Security, you will lead NHG Digital’s cyber security domain, protecting our digital services, systems, suppliers, data flows and operational environments through clear strategy, standards, controls, monitoring, assurance and incident response.

Job Introduction

What You’ll Do

As the Head of Cyber Security, you will lead NHG Digital’s cyber security domain, protecting our digital services, systems, suppliers, data flows and operational environments through clear strategy, standards, controls, monitoring, assurance and incident response.

You will own our cyber security policy, cyber risk position, control assurance and specialist security judgement, making cyber risk visible, understood and managed as a core business risk. You will ensure that security requirements are embedded across product, architecture, engineering, transition, operations, data, supplier and governance activity.

Working with senior leaders and teams across NHG, you will help protect residents, colleagues, services, data and public trust while enabling digital change to be delivered safely and responsibly.

How You’ll Do It

• Lead and maintain NHG Digital’s cyber security strategy, roadmap, policies, standards and control framework, aligned to our risk appetite, operating model, regulatory context and changing threat environment.
• Own specialist cyber security assurance across products, platforms, integrations, infrastructure, suppliers, identity and access, privileged access, perimeter controls, vulnerability management, monitoring, incident response and recovery.
• Embed security requirements early in product discovery, service design, architecture, DevOps delivery, supplier management, service transition and live operations.
• Work with Digital Operations to ensure agreed controls are sustained across patching, vulnerability response, monitoring, privileged access, backup and recovery, incident response and operational resilience.
• Lead cyber monitoring, threat awareness, incident preparation and major cyber incident response coordination, including playbooks, escalation routes, evidence capture and recovery expectations.
• Provide clear and proportionate advice to senior leaders on cyber threats, control gaps, response options and residual risk.
• Hold suppliers and managed service partners to account for cyber obligations, assurance evidence, access controls, incident notification, vulnerability remediation, penetration testing and ongoing compliance.
• Build cyber security awareness and capability across NHG Digital, helping technical and non-technical colleagues understand their role in protecting residents, staff, data and services.

The ideal candidate

We believe great service starts with great people, and we are committed to recruiting and developing passionate, enthusiastic, and talented individuals who can add value to our thriving organisation.

Pending confirmation of legislative changes, this role may require a qualification to demonstrate competence. If not already qualified, there may be an expectation to study towards a professional qualification.

Essential

• Pending confirmation of legislative changes, this role may require a qualification to demonstrate competence. If not already qualified, there may be an expectation to study towards a professional qualification.
• Substantial experience leading cyber security, information security, security operations, cyber risk, security assurance or resilience within a complex, regulated or similarly accountable environment.
• Strong knowledge of cyber security strategy, policy, standards, management, controls, assurance, risk monitoring, vulnerability management, response and recovery. incident.
• Proven ability to define and maintain proportionate cyber security controls across identity, access, perimeter security, privileged cloud, access, platforms, infrastructure, applications, integrations, suppliers and live operational environments.
• Experience embedding security requirements into product discovery, architecture, DevOps delivery, supplier management, service transition, change control and live operations.
• Ability to assess and explain cyber risk, control gaps, residual-risk options and assurance evidence clearly to senior leaders, technical specialists, service owners and non-technical stakeholders.
• Experience leading or coordinating cyber incident preparation and response, including playbooks, escalation routes, evidence capture, communication principles, recovery expectations and lessons learned.
• Good understanding of data protection, privacy, records management, business continuity, operational resilience, supplier assurance, responsible AI, auditability and regulatory expectations in a digital service environment.
• Experience holding suppliers and managed service partners to account for security obligations, assurance evidence, access controls, incident notification, vulnerability remediation, penetration testing, contractual controls and ongoing compliance.
• Strong communication and influencing skills, with the ability to promote security awareness, advise senior leaders, challenge constructively and translate technical security issues into practical business risk decisions.
• Visible, values-led leadership style, with the ability to build capability, support teams under pressure, escape appropriately and create an inclusive, accountable and security-aware culture.

What’s in it for you?

Once you join us, you’ll find plenty of opportunities to grow within our organisation. You’ll also have access to a wide range of learning opportunities to help you achieve and maximise your potential.

• Excellent annual leave allowance and flexible working opportunities (qualifying period may apply)
• Generous pension scheme
• Enhanced maternity, paternity, and adoption pay in addition to statutory entitlements (qualifying period may apply)
• Employee assistance - free confidential advice and counselling services provided by independent specialist organisations.
• Health cash plan
• Staff discounts - we give our staff access to discounts at hundreds of major retailers, gyms, restaurants, entertainment, days out, insurance, and much more.
• Interest free loans - season ticket loan, tenancy deposit loan, and training loan
• Cycle to work scheme.
• Life Assurance x 4 annual salary

All About Us

Notting Hill Genesis is a not-for-profitorganisation providing affordable homes for Londoners and it is now one of thelargest housing associations in London. We are both alandlord and a developer, with more than 65,000 existing homes and we employaround 1,800 employees.

We welcome applications from everyone. We actively monitor the diversity of our workforce and strive to show equal representation throughout all levels of the organisation. We are a Stonewall Diversity Champion, a Disability Confident employer amongst other diversity commitments.

Step 2: Successful candidates will be asked to do an assessment

NHG reserves the right to close this vacancy early if we receive sufficient applications for the role, so we advise you to submit your application at your earliest opportunity.