Head of Information Security

Opencast; Newcastle upon Tyne; Hybrid; GBP 65,000 - 70,000; Full time

Job summary

A growing tech consultancy in Newcastle upon Tyne is seeking a Head of Information Security to lead and enhance its information security strategy. The role involves ensuring compliance with ISO 27001 and GDPR, managing risks, and fostering a strong security culture throughout the organization. Competitive salary ranges between £65k and £70k plus benefits including pension and training support.

Benefits

Competitive pension

Health cash plan

Discretionary bonus

Flexible hours

25 days' holiday

Qualifications

• Proven experience in leading information security management systems.
• Strong understanding of risk assessment and compliance frameworks.
• Excellent communication skills for training and engagement.

Responsibilities

• Maintain ISMS and ensure compliance with ISO/IEC 27001.
• Develop security policies and training programmes.
• Conduct regular risk assessments and manage incidents.

Skills

Information security management

Risk assessment

Compliance with ISO 27001

Regulatory knowledge

Security culture advocacy

Job description

Overview

Ready for a new challenge? If you want to work with people who learn and grow together, Opencast could be the place for you. We’re a growing tech consultancy that creates user-centred solutions with purpose for our clients in government and business.

Role: Head of Information Security at Opencast. You will lead and continuously improve our information security strategy, ensuring alignment with regulatory, legal, and business requirements. Acting as the internal authority on information security, you’ll drive compliance with frameworks such as ISO 27001, GDPR, and Cyber Essentials Plus, while embedding a strong culture of security awareness across the organisation. You’ll work closely with key stakeholders to identify and mitigate risk, ensure data protection, and maintain readiness in a fast-evolving threat landscape to enable secure, resilient operations that support business growth and client trust.

Responsibilities

• Own and maintain the Information Security Management System (ISMS), ensuring ongoing compliance and certification to ISO/IEC 27001.
• Develop and implement robust information security policies, procedures, and staff training programmes.
• Lead regular risk assessments and proactively manage mitigation and remediation actions.
• Coordinate internal and external audits for ISO 27001, Cyber Essentials Plus, and GDPR.
• Oversee GDPR compliance processes, including DSARs, DPIAs, and data incident responses.
• Investigate and manage security incidents, leading post-incident reviews and continuous improvement.
• Conduct supplier due diligence on security throughout onboarding, review, and offboarding stages.
• Respond to client security questionnaires (ISQs) and provide up-to-date security documentation.
• Monitor evolving threats, technologies, and regulations, and recommend appropriate changes.
• Drive a strong security culture through effective communication, training, and staff engagement.

Salary

Salary band for Head of Information Security Level 4 £65-£70k

What our offer includes

A competitive pension, health cash plan, and discretionary bonus. Flexible hours and 25 days' holiday. Training and people to support you every step of the way.

Where you’ll work

Our approach is a mixture of working from our HQ and hub locations, or home, depending on the needs of your work. You must be located within 40 miles of our Newcastle HQ or one of our Hubs in Edinburgh, Glasgow or London and be happy to travel to any of our offices when required.

We include you

We won’t discriminate on age, disability, ethnicity, family status, gender, race, religion or sexual orientation.

Interview

Job interviews are on Microsoft Teams or in person if suitable. We’ll make any adjustments to help you.

Want to know more?

Visit our website or email [e-mail]

£65,000 - £70,000 a year