Head of Information Security & DevSecOps

Opus Recruitment Solutions Limited; London Borough of Barking and Dagenham; On-site; GBP 120,000 - 180,000; Full time

Job summary

Opus Recruitment Solutions Limited is seeking an experienced Head of Information Security to lead and strengthen a modern security function. This hands-on contract role works closely with the CTO and engineering teams to embed security across the product lifecycle.

You will own the information security strategy, drive ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance, embed secure‑by‑design and DevSecOps, and advance security through AI, automation and strong incident response, vulnerability

Qualifications

• CISSP, CISM or equivalent.
• Strong knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR.
• Proven leadership across information security, cyber risk or assurance.
• Strong technical understanding of cloud, application, network, endpoint and data security.
• Experience with SIEM/SOC, vulnerability management and incident response.
• Strong stakeholder management with a pragmatic, hands-on approach.

Responsibilities

• Own and evolve the information security strategy.
• Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance.
• Embed secure-by-design and DevSecOps across engineering.
• Drive security improvements through AI, automation and technical controls.
• Lead security risk, threat modelling, vulnerability management and incident response.
• Oversee third-party/supplier security and operational security controls.
• Partner with SOC and engineering teams to improve detection and response.
• Support client assurance and security audits.

Skills

Leadership

Stakeholder management

Hands-on security

Job description

Opus Recruitment Solutions Limited is seeking an experienced Head of Information Security to lead and strengthen a modern security function. This hands-on contract role works closely with the CTO and engineering teams to embed security across the product lifecycle.

You will own the information security strategy, drive ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance, embed secure‑by‑design and DevSecOps, and advance security through AI, automation and strong incident response, vulnerability