Head of Information Security

University of Birmingham; Birmingham; Hybrid; GBP 75,000 - 88,000; Full time

Job summary

A leading educational institution is seeking a Head of Information Security to define and lead its security strategy. The successful candidate will manage risks to the University's systems and drive the implementation of security policies. Extensive experience in security leadership and strong communication skills are essential. The role offers a competitive salary and a hybrid working model.

Benefits

Market rate supplement

Universities Superannuation Scheme (USS) pension

25 days annual leave

Occupational sick pay

Access to subsidised nurseries

Qualifications

• Senior-level experience in security leadership with a proven track record.
• Extensive experience in leading information security strategy.
• Strong strategic thinking and planning capabilities.
• Demonstrable expertise in compliance programmes.
• Experience in assessing and managing information security risks.

Responsibilities

• Lead the University's information security strategy.
• Oversee IT security activities and manage risks.
• Develop and maintain IT security policies and procedures.
• Collaborate with teams to assess information security risks.
• Act as the authoritative representative on security matters.

Skills

Security leadership

Strategic thinking

Communication skills

Risk management

Compliance expertise

Education

Higher education or public sector background

Tools

ISO27001

NIST

COBIT

Cyber Essentials

Job description

Head of Information Security vacancy at the University of Birmingham

£75,000 - £87,500 with potential for market rate supplement

Hays Technology and The University of Birmingham are working in partnership to recruit a Head of Information Security on a permanent basis.

Overview

The University of Birmingham has been part of the city for over 100 years and is proud to be recognised as a world-class Russell Group institution. It supports the growth and development of its staff via work/life balance-oriented hybrid and flexible working schemes, and initiatives such as the sector-leading Birmingham Professional programme, offering career development opportunities to help individuals reach their full potential. The university holds a firm commitment to diversity and inclusion and welcomes individuals from all backgrounds, fostering a collaborative environment where different perspectives drive innovation and progress. Set in leafy Edgbaston, the campus offers excellent transport links and a vibrant atmosphere, with a sports centre, shops, cafés, an art gallery, museum, and botanical gardens.

About the role

The Head of Information Security will be tasked with leading, defining and driving the University’s information security strategy whilst taking ownership of its security posture. The role oversees all IT security activities and manages all risks to the University’s systems and data from internal and external threats. As such, the successful candidate will be developing and maintaining the University’s IT security policies and procedures in accordance with best practice security standards and frameworks, leveraging existing technology, internal skillsets and external technology providers.

What you’ll be doing

• Developing and executing a strategic, enterprise-wide information security and IT risk management programme aligned with the University's goals and regulatory requirements.
• Overseeing the creation, enhancement, and enforcement of a robust information security management framework, including all related policies, standards, and procedures.
• Leading a medium-sized team of information security and cyber professionals, recognising and utilising their individual skillsets, and developing the overall team to reach its full potential.
• Collaborating with academic and professional services teams to assess and manage information security risks across the organisation.
• Defining and evolving the structure of the Information Security team, ensuring appropriate staffing and capabilities to meet current and future needs.
• Acting as the University’s authoritative representative on information and cyber security matters, engaging with external partners, networks, and regulatory bodies.
• Partnering with stakeholders across the University to raise awareness of information security risks and promoting a culture of shared responsibility.
• Overseeing the ongoing implementation of security tools and working with technical cyber security staff to maximise the effectiveness of existing tooling.
• Working closely with vendors to interpret and manage complex licensing terms, ensuring compliance and maximising the utilisation of existing security tools.
• Demonstrating a mature and compliant approach to information governance and security, in alignment with public-sector specific requirements.

What we’re looking for

• Senior-level experience in security leadership built upon a progressive trajectory in IT Security roles, with a proven track record of defining strategic security initiatives and serving as a trusted subject matter expert.
• Extensive experience in leading information security strategy and governance, including the creation, implementation, and enforcement of security policies, monitoring frameworks, and compliance structures within large organisations.
• Whilst certainly not essential, a higher education or public sector background would be ideal.
• Strong strategic thinking and planning capabilities, with the ability to articulate and drive a clear vision for information security across the university.
• Demonstrable expertise in implementing and maintaining formal compliance or certification programmes, such as ISO27001, NIST, COBIT or Cyber Essentials.
• Experience in assessing, managing, and quantifying information security risks, including the development of metrics and tracking mechanisms.
• Experience working with senior stakeholders, earning trust and influencing decision-making at executive levels.
• Excellent communication and presentation skills, with the ability to articulate complex security concepts to non-technical audiences.

What you’ll get in return

• A salary between £75,000 and £87,500 (DoE)
• Market rate supplement – enquire for details
• A hybrid arrangement of 3 days in office and 2 days per week from home
• Universities Superannuation Scheme (USS) pension of 22% (9% personal, 13% UofB contribution)
• 25 days annual leave, 7 University Closure Days, 8 Bank Holidays
• Volunteering leave
• Occupational sick pay
• Access to three subsidised nurseries
• Access to the Birmingham Professional programme

Closing date: 24th October

Hays Technology have been retained by the University of Birmingham to manage the recruitment of this role. For all enquiries, please contact James Dilks at Hays Technology.

If you have the relevant experience and would like to apply, please submit your CV.