Head of Information Security

Bloomsbury Publishing Plc; Greater London; Hybrid; GBP 110,000 - 160,000; Full time

Benefits offered by this job

25 days holiday

3.5 days Christmas company holiday

Two paid Personal Wellness Days

Flexible Fridays

Work Anywhere Fortnight

Season Ticket Loan

Share save Scheme

AXA Healthcare Plan (Private Medical)

Peppy Health App

In-house Doctor

Eye care Voucher Scheme

Job summary

Bloomsbury Publishing Plc is creating a new role of Head of Information Security to lead the information security agenda for an international business. You will set direction, shape priorities, and drive improvements through to implementation.

Reporting to the Global Head of Technology, you will act as the lead expert on information and cyber security and translate risk into pragmatic business decisions for executives.

Qualifications

• Significant experience in information or cyber security, grounded in practical technical work.
• Strong experience securing enterprise network and infrastructure environments.
• Good knowledge of cloud security, ideally within Microsoft 365 and Azure environments, with knowledge of Google Enterprise a plus.
• A strong understanding of identity, authentication, privileged access and access-control.
• Experience of vulnerability management, security monitoring and incident response.
• A track record of establishing or improving security standards, policies and controls.
• The ability to translate technical risk into pragmatic business decisions and communicate it clearly to senior, non-technical audiences.
• Experience working with recognised frameworks such as the NIST Cybersecurity Framework, CIS Controls and ISO/IEC 27001, applied as practical tools rather than ends in themselves.
• Experience in an international or multi-site organisation, or in publishing, media or another IP-rich sector, would be an advantage but is not required.
• A recognised security certification is desirable but not essential.

Responsibilities

• Lead information security agenda and set direction for security improvements.
• Be Bloomsbury’s lead subject-matter expert on information and cyber security.
• Define what good security looks like and implement proportionate controls across teams.

Skills

InfoSec experience

Network & infrastructure security

Cloud security

Identity & access management

Vulnerability management

Incident response

Security standards & controls

Executive communication

Industry frameworks

International/multi-site experience

Education

Security certification (desirable)

Job description

We are creating a new role of Head of Information Security. This is an opportunity for a technically strong security professional to take leadership of the information security agenda for a respected international business — setting the direction, shaping the priorities and seeing improvements through to implementation.

Reporting to the Global Head of Technology, you will be Bloomsbury’s lead subject‑matter expert on information and cyber security. You will define what good security looks like for us and work with infrastructure and wider technology teams to put proportionate and practical controls in place.

Knowledge, skills and experience

You are a hands‑on security professional who has developed into a senior, trusted adviser. Your background is likely to be in areas such as network, infrastructure or cloud security, security operations, identity and access management, security architecture, vulnerability management or incident response. You are equally comfortable challenging a proposed network or security configuration with an engineer and explaining a security risk and its business implications to Executives.

You are pragmatic, commercially aware and able to separate the risks that matter from those that do not. You challenge constructively, influence people who do not report to you, and remain calm and methodical when things go wrong.

• Significant experience in information or cyber security, grounded in practical technical work.
• Strong experience securing enterprise network and infrastructure environments.
• Good knowledge of cloud security, ideally within Microsoft 365 and Azure environments, with knowledge of Google Enterprise a plus.
• A strong understanding of identity, authentication, privileged access and access‑control.
• Experience of vulnerability management, security monitoring and incident response.
• A track record of establishing or improving security standards, policies and controls.
• The ability to translate technical risk into pragmatic business decisions and communicate it clearly to senior, non‑technical audiences.
• Experience working with recognised frameworks such as the NIST Cybersecurity Framework, CIS Controls and ISO/IEC 27001, applied as practical tools rather than ends in themselves.
• Experience in an international or multi‑site organisation, or in publishing, media or another IP‑rich sector, would be an advantage but is not required.
• A recognised security certification is desirable but not essential.

Personal Capabilities

• Technically credible and intellectually curious, with a genuine interest in how systems work and why they fail.
• Pragmatic; able to distinguish material risks from theoretical or low‑value issues.
• Commercially aware, balancing security with cost, usability and business needs.
• Able to influence and gain commitment from teams that do not report to them.
• Comfortable challenging existing practice constructively and with evidence.
• A clear communicator with both technical and non‑technical audiences, in writing and in person.
• Calm, methodical and decisive during security incidents.
• Able to work independently while collaborating closely with Technology colleagues.

Bloomsbury reserve the right to close the role early if we exceed the required number of applications

Additional information

Starting:

As soon as possible

Contract:

Full‑time, permanent.

Hybrid‑working

2 days per week on‑site

Bloomsbury Benefits

• 25 days holiday
• 3.5 days Christmas company holiday
• Two paid Personal Wellness Days
• Flexible Fridays
• Work Anywhere Fortnight
• Season Ticket Loan
• Share save Scheme
• AXA Healthcare Plan (Private Medical Insurance)
• Peppy Health App
• In‑house Doctor
• Eye care Voucher Scheme

And a range of other benefits as listed on our company website: https://www.bloomsbury.com/uk/connect/work-with-us/rewarding-you/

Bloomsbury is a place where anyone of any background, race, ethnicity, religion, sexuality, gender identity, age, ability, or socio-economic status can thrive, feel comfortable, and be heard and accepted. We are an equal opportunities employer and welcome applications from all sections of the community.

We are willing to make any reasonable adjustments throughout the recruitment process, please flag to the recruitment team if required.

Applicants must have the legal right to work in the UK.