Head of Cyber Security

Michael Page (UK); Greater London; Hybrid; GBP 150,000 - 200,000; Full time

Job summary

A respected not-for-profit organisation in the UK is seeking a Cyber Security Leader to develop and implement their security strategy. The role involves leading and mentoring a security team, ensuring compliance with various regulatory requirements, and managing security risks. Candidates should possess strong leadership experience, relevant security certifications, and excellent communication skills. This position primarily allows for remote working with occasional office attendance for collaboration.

Benefits

Strong pension offering

Generous annual leave

Wellbeing support

Professional development funding

Qualifications

• Strong experience in leading cyber security initiatives and teams.
• Hands-on knowledge of PCI-DSS, ISO 27001, and Cyber Essentials Plus.
• Ability to engage and communicate with stakeholders at all levels.

Responsibilities

• Develop the organisation's cyber and information security strategy.
• Lead, mentor, and develop the security team to improve performance.
• Oversee compliance with key regulatory requirements and standards.
• Conduct security risk assessments and maintain governance frameworks.

Skills

Cyber security leadership

Communication skills

Budget management

Regulatory compliance

Education

Professional security certification (e.g., CISSP, CISM)

Job description

About Our Client

Our client is a respected not‑for‑profit UK organisation with a nationwide footprint. They are investing in cyber security maturity, operational transformation, and long‑term strategic development.

Job Description

• Develop and deliver the organisation's cyber and information security strategy.
• Lead, mentor, and develop the security team, supporting high performance and continuous improvement.
• Oversee compliance with PCI‑DSS, ISO 27001, Cyber Essentials Plus, GDPR, and other regulatory requirements.
• Conduct security risk assessments, maintain governance frameworks, and ensure robust oversight.
• Set, enforce, and update security policies, standards, and technical controls.
• Lead incident response, including investigation, coordination, remediation, and reporting.
• Manage supplier assurance, third‑party risk, and security obligations within contracts.
• Plan and support external audits and security reviews, ensuring follow‑up actions are delivered.
• Engage senior stakeholders across departments to communicate risks, priorities, and strategic direction.

The Successful Applicant

• Professional security certification (e.g., CISSP, CISM, or equivalent).
• Strong experience in cyber security leadership, strategy development, and operational oversight.
• Knowledge and hands‑on involvement with PCI‑DSS, ISO 27001, and Cyber Essentials Plus.
• Experience managing and developing security teams and influencing organisational change.
• Strong communication skills with the ability to engage executives, technical teams, and partners.
• Experience with budget management and prioritising security investment.

What's on Offer

• Primarily remote working with occasional office attendance for collaboration.
• Strong pension offering.
• Generous annual leave and wellbeing support.
• Professional development funding, leadership training, and opportunities to shape a growing team.