Head of Cyber Security and Assurance

West Midlands Police; West Midlands; Hybride; GBP 69 000 - 75 000; Plein temps

Résumé du poste

West Midlands Police are seeking a senior leader to head Cyber Security & Assurance within IT & Digital. You will own the strategic security program across the force, guiding incident response, governance and SbD implementation.

This role manages a specialist team, with a six-figure budget, and chairs the CSAB. You will partner with National Technical Authorities and senior governance forums to embed secure by design in projects and protect a large-scale organisation (~15,000 staff).

Description du poste

Introduction to the department

The IT & Digital department is responsible for the force’s adoption and use of information and digital technology.

The department consists of three core functions as follows:

• Architecture Management (responsible for identifying and selecting the right technologies for the force)
• Delivery Management (responsible for delivering and implementing the right technologies for the force)
• Service Management (responsible for managing and maintaining all live, operational technology for the force)

Outline of the role

West Midlands Police have completed a large-scale digital transformation programme, and therefore technologies such as Cloud, Artificial Intelligence, Automation and Mobility are no longer visionary – they underpin policing today.

The next stage in our technology ambition is focused around the concept of Synergy and delivering secure, resilient and exceptional services. This role will focus and shape our path in the Synergy strategy as it relates to cyber security and assurance—strengthening our ability to prevent, detect, respond and recover from cyber threats—thus driving real-world impact on policing technology and our mission to prevent crime, protect the public and help those in need.

Aligned to IT&D Synergy 2030, this role will embed security as an enabler. Security must be seamless, invisible and silent in enablement—delivering frictionless, secure user journeys while assuring risk, compliance and resilience. You will continue to embed security from the start of projects utilising SbD (Secure by Design) principles.

In this fast-paced and diverse role you will be responsible for West Midlands Police’s technical cyber security and information assurance capabilities. You’ll be instrumental in ensuring that the department can effectively understand, detect, investigate and respond to cyber security threats and vulnerabilities.

This is a senior leadership opportunity. Leading a specialist team, you will own the operational cyber security and information assurance function, ensuring our capability to understand, detect, investigate and respond to threats and vulnerabilities across a large-scale organisation (~15,000 employees) and associated cloud/on‑prem infrastructure. You will work closely with the Deputy for IT&D to design and drive implementation of the cyber security strategy and roadmap, deputising at senior‑governance forums (Digital Senior Leadership Team, Technical Design Authority, and programme boards).

This is a one-of-a-kind opportunity, leading a small team - we want you to help take our policing technology cyber security and information assurance level to exceptional. This new role will own the “Defend as One” security arm of the Synergy 2030 technology strategy. You will be joining a dept that is consider a highly regarded “technology partner” to our organisation and post our digital transformation we need someone to think creatively around some of the existing and new security, information and cyber challenges that our organisation faces.

Key Responsibilities

• Strategic Leadership & Team Management: Lead and coordinate the Cyber Security and Assurance function. Act as the independent, expert voice of security, managing six-figure budgets and directing a team of specialized information security managers and advisors.
• Incident Response & Operations: Act as the technical lead for major cyber security incidents and critical vulnerabilities impacting West Midlands Police. Establish operational frameworks, playbooks, security monitoring (SIEM/XDR), and simulated wargaming exercises.
• Governance, Policy & Compliance: Own and update Information Assurance policies aligned with national frameworks (NCSC, NIST CSF, ISO 27001). Chair the Cyber Security Assurance Board (CSAB) and manage the Security Assessment in Policing (SyAP) national submission and legal/ICO compliance.
• Risk Management & "Secure by Design": Embed risk-based decision‑making and Secure by Design (SbD) principles across all programmes. Govern the IT&D departmental risk register, define risk tolerances with executive leadership, and manage Data Protection Impact Assessments (DPIAs).
• Stakeholder Engagement & Culture: Partner with National Technical Authorities (NTB-National Technology Board, PDS) to share intelligence. Brief senior leadership on evolving threats through executive reporting, while championing a proactive cyber security culture across the entire force

Salary and Shifts

Salary: Grade 11 £69,102.00 - £75,177.00

Hours: This is a full-time position working between core hours of 08:00 to 16:00, Monday to Friday. The role is hybrid working with 60% of working days on-site.

Selection Process

1. Online Application and Sift - You will complete an online application form, which will be reviewed against the skills, experience and behaviours required for the role.

   Closing Date: Sunday 1st November 2026

2. Assessment and Interview

   Candidates who successfully pass the application stage will be invited to attend an interview and assessment. This will provide you with the opportunity to demonstrate your suitability for the role.

   Proposed date(s): TBC for November 2026

3. Pre-Employment Checks - If you are selected as the preferred candidate, you will be required to successfully complete relevant pre-employment checks before receiving a formal offer. For internal candidates, some checks may not be required.

   Checks may include:

   1. Vetting Checks - You must successfully complete the required level of Management vetting and Security clearance before starting the role. This may include providing information relating to your background and financial history as part of the vetting process.
   2. Medical Checks - Appointment to this role is subject to successfully completing medical checks. This may include a drugs test and, where required, a fitness assessment.
   3. Reference Checks - You will need to provide details covering at least five years of employment, education or other relevant activity history.

We are committed to supporting candidates throughout the recruitment process and reasonable adjustments are available for those who need them.