Head of Security Information Security

Opus Recruitment Solutions Limited; City Of London; On-site; GBP 120,000 - 170,000; Full time

Job summary

Opus Recruitment Solutions Limitedis seeking an experienced Head of Information Security to lead a modern security function and work closely with the CTO and engineering teams to embed security across the product lifecycle.

The role is hands-on and contract-based, focusing on building robust security controls, threat modelling and incident response while driving secure-by-design practices across development teams.

Qualifications

• Candidates must demonstrate senior information security leadership with hands-on delivery.
• Proven track record implementing and maintaining ISO 27001, SOC 2, NIST, GDPR and PCI DSS.
• Strong knowledge of cloud, application, network, endpoint and data security.
• Experience leading security across product lifecycle and with DevSecOps.

Responsibilities

• Own and evolve the information security strategy.
• Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance.
• Embed secure-by-design and DevSecOps across engineering.
• Drive security improvements through automation and technical controls.
• Lead security risk, threat modelling, vulnerability management and incident response.
• Oversee third-party/supplier security and operational security controls.
• Partner with SOC and engineering teams to improve detection and response.
• Support client assurance and security audits.

Skills

Security leadership

Hands-on security

Stakeholder management

DevSecOps

Threat modelling

Incident response

Education

CISSP

CISM

ISO 27001 knowledge

NIST knowledge

PCI DSS knowledge

GDPR knowledge

Tools

SIEM/SOC tools

Vulnerability management tools

Cloud security tooling

Job description

We’re looking for an experienced Head of Information Security to lead and strengthen a modern security function. This is a hands-on contract, working closely with the CTO and engineering teams to embed security across the product lifecycle.

Key responsibilities

• Own and evolve the information security strategy.
• Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance.
• Embed secure-by-design and DevSecOps across engineering.
• Drive security improvements through AI, automation and technical controls.
• Lead security risk, threat modelling, vulnerability management and incident response.
• Oversee third-party/supplier security and operational security controls.
• Partner with SOC and engineering teams to improve detection and response.
• Support client assurance and security audits.

Experience required

• CISSP, CISM or equivalent.
• Strong knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR.
• Proven leadership across information security, cyber risk or assurance.
• Strong technical understanding of cloud, application, network, endpoint and data security.
• Experience with SIEM/SOC, vulnerability management and incident response.
• Strong stakeholder management with a pragmatic, hands-on approach