Head of Cyber Security

Formula.; Greater London; Hybrid; GBP 96,000 - 126,000; Full time

Job summary

Formula. is seeking a Head of Cyber Security to own its security posture end-to-end, reporting to the Director of IT & Cyber Security. This is the group’s most senior cyber security role, combining hands-on technical ownership with governance, risk and executive-level influence.

The role requires deep expertise across cloud/app security, security operations, ISO 27001, PCI DSS and proven senior leadership. Hybrid work in London, up to £600/day, 6-month initial contract.

Qualifications

• Hands-on cloud and application security, security operations, vulnerability management and incident response.
• Ongoing ISMS ownership and ISO 27001 certification leadership.
• Experience with PCI DSS compliance and external audits.
• Ability to influence senior stakeholders up to C-suite.
• Senior security leadership with people management experience.
• Certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor.

Responsibilities

• Own security posture end-to-end and lead compliance initiatives.
• Coordinate ISO 27001 certification and recertification processes.
• Lead PCI DSS compliance efforts and support external audits.
• Engage with senior stakeholders up to the C-suite.

Skills

Cloud security

Security operations

Incident response

Stakeholder engagement

People management

Education

ISO 27001 Lead Implementer/Auditor

Tools

PCI DSS

ISO 27001

Job description

Contract : Head of Cyber Security : Up to £600 per day Outside IR35 : Hybrid (London) : 6 months initial

A fast-moving, AI-first digital consumer business operating at scale across multiple global offices is seeking a Head of Cyber Security to own its security posture end-to-end, reporting to the Director of IT & Cyber Security.

This is the Group's most senior dedicated cyber security role, combining deep technical ownership, compliance and audit leadership, and executive-level influence.

The business serves millions of end users through a converged ecosystem of high-traffic platforms and moves quickly, making this a genuine strategic priority rather than a support function.

Key requirements:

• Hands-on expertise across cloud and application security, security operations, vulnerability management and incident response
• Track record owning an ISMS and leading ISO/IEC 27001 certification and recertification
• Experience owning PCI DSS compliance and leading external audits to successful outcomes
• Proven ability to engage and influence senior stakeholders up to C-suite level
• Senior security leadership experience with direct people management
• CISSP, CISM, CISA or ISO 27001 Lead Implementer/Auditor certification (cloud security certification advantageous)
• Experience in a regulated industry advantageous
• Up to £600.00 per day, Outside IR35
• Hybrid working, London (3 days per week)
• 6 month initial term
• Two stage process (7th September start date)

Due to the high volume of applications, not all applicants will receive feedback.

Contract : Head of Cyber Security : Up to £600 per day Outside IR35 : Hybrid (London) : 6 months initial