Head of Information Security — Shape Strategy & Rise CISO

Oakley Recruitment Limited; Tyseley; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Additional benefits package

Travel as required

Senior leadership role

Job summary

Oakley Recruitment partner organisation in Birmingham seeks a Head of Information Security to design and lead a robust information security strategy on a full-time basis.

You will report to the CEO and work with senior leadership to govern risk, oversee cloud/SaaS security, and develop secure-by-design practices across technology teams. The role offers executive exposure and a clear path toward the organisation's CISO future.

Qualifications

• Experience leading information or cyber security at management level.
• Ability to shape security strategy and governance across the organisation.
• Strong knowledge of ISO 27001, ISMS and risk-based programmes.
• Proven ability to translate security risk into commercial language for executives.

Responsibilities

• Lead and continually develop an ISO 27001-aligned ISMS.
• Maintain the security risk register and controls.
• Provide clear security reporting to CEO and leadership.
• Oversee security across cloud, SaaS, identities, APIs and data.
• Manage vulnerability management, penetration testing and incident response.
• Embed secure-by-design and DevSecOps with technology teams.
• Coordinate external security providers as needed.
• Develop security awareness and foster a strong security culture.
• Monitor threats, regulatory requirements and AI-related risks.
• Evolve the security function and operating model as the organisation grows.
• Build executive-level capability toward future CISO responsibility.

Skills

Leadership

Governance

Risk Management

Stakeholder Communication

Security Strategy

Incident Response

Cloud Security

ISO 27001

DevSecOps

Vulnerability Management

Tools

ISO 27001 ISMS

AWS

Azure

GRC Tools

Job description

Oakley Recruitment partner organisation in Birmingham seeks a Head of Information Security to design and lead a robust information security strategy on a full-time basis.

You will report to the CEO and work with senior leadership to govern risk, oversee cloud/SaaS security, and develop secure-by-design practices across technology teams. The role offers executive exposure and a clear path toward the organisation's CISO future.