Head of IT Security

Adecco; Greater London; On-site; GBP 100,000 - 120,000; Full time

Job summary

A recruitment agency is looking for a Head of IT Security based in Wembley to lead their enterprise-wide security function. This senior role involves defining security strategy, managing incident responses, and ensuring compliance with regulations such as GDPR and PCI DSS. The ideal candidate will possess strong leadership skills and significant experience in information security, as well as relevant certifications. The position entails a full-time permanent contract with key responsibilities in strategy development and risk management.

Qualifications

• Proven senior leadership experience in information, cyber, or data security.
• Hands-on experience with cloud platforms (Azure, AWS).
• Exceptional leadership, stakeholder engagement, and influencing skills.

Responsibilities

• Own the strategic and operational delivery of all information and cyber security activities.
• Develop and implement robust security policies.
• Oversee incident response and ensure compliance with GDPR, PCI DSS, and ISO standards.

Skills

Leadership experience in information security

Strong stakeholder engagement

Knowledge of GDPR and compliance requirements

Experience with cloud platforms

Familiarity with security frameworks

Hands-on experience with Zero Trust models

Education

CISSP, CISM, or CISA certification (or equivalent)

Tools

Azure

AWS

SCCM

Ivanti

Intune

Azure Defender

Job description

Head of IT Security - Wembley - (Enterprise-wide Cyber & Information Security)

Location: Wembley - 5 days on-site

Salary: £(phone number removed) per annum

My client is looking to recruit a Head of IT Security to lead and shape their enterprise-wide security function. This is a senior leadership role offering the opportunity to define security strategy, strengthen governance, and protect critical systems, data, and operations.

The Role

As Head of Security, you will own the strategic and operational delivery of all information and cyber security activities. You'll develop and implement robust security policies, oversee incident response, and ensure compliance with GDPR, PCI DSS, ISO 27001, and Cyber Essentials Plus. You will be the single point of accountability for all security matters, reporting directly to the executive team and influencing critical business decisions.

Key Responsibilities

• Develop, maintain, and deliver a 3-5 year Security Strategy and Roadmap covering technology, people, and processes.
• Embed security by design across projects, platforms, data flows, and product development.
• Lead enterprise-wide information, cyber, and data security governance.
• Define and implement security frameworks, policies, and operating models.
• Ensure compliance with GDPR, PCI DSS, Cyber Essentials Plus, and ISO/IEC 27001:2022 aligned practices.
• Lead Data Protection Impact Assessments (DPIAs), data mapping, classification, and retention programs.
• Oversee incident response, vulnerability management, patch compliance, and secure configuration baselines using SCCM, Ivanti, Intune, GPO, and Azure Defender.
• Drive SOC integration, threat intelligence, and monitoring to continuously improve detection and response capabilities.
• Manage hybrid environments, including Azure, AWS, Nutanix, and on-premise infrastructure.
• Support SD‑WAN, cloud Firewalls, CASB, Zero Trust, and SASE architectures.
• Own enterprise security risk assessments, track key risk indicators (KRIs), and report on cyber maturity to executive leadership.
• Drive security culture through training, phishing simulations, and awareness programs.
• Partner with IT, Legal, HR, and business units to embed security in operations and service delivery.
• Provide security input for vendor assessments, third‑party risk, and M&A due diligence.

Candidate Profile

• Proven senior leadership experience in information, cyber, or data security.
• CISSP, CISM, or CISA certified (or equivalent).
• Track record of delivering security programs aligned to ISO 27001, NIST, PCI DSS, and Cyber Essentials Plus.
• Hands‑on experience with cloud platforms (Azure, AWS), on‑premise networks, and hybrid architectures.
• Strong experience in Zero Trust security models.
• Experienced in security tooling selection and implementation.
• Deep understanding of data protection legislation, risk management frameworks, and compliance requirements.
• Exceptional leadership, stakeholder engagement, and influencing skills.

Job Info

Job Title: Head of IT Security - Wembley

Company:

Location: Wembley

Posted:

Closes: Jan 23rd 2026

Sector: IT

Contract: Permanent

Hours: Full Time