Head Of Security Information Security

Opus Recruitment Solutions Limited; Greater London; On-site; GBP 120,000 - 160,000; Full time

Job summary

Opus Recruitment Solutions Limited is seeking an experienced Head of Information Security to lead a modern security function on a hands-on contract basis in the UK. You will collaborate with the CTO and engineering teams to embed security across the product lifecycle.

Responsibilities include governing ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance, implementing secure-by-design and DevSecOps, and driving improvements through AI and automation.

Qualifications

• CISSP, CISM or equivalent required.
• Deep knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR.
• Proven leadership across information security, cyber risk or assurance.
• Hands-on security with cloud, application, network and data protection.

Responsibilities

• Own and evolve the information security strategy.
• Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance.
• Embed secure-by-design and DevSecOps across engineering.
• Drive security improvements through AI, automation and technical controls.
• Lead security risk, threat modelling, vulnerability management and incident response.
• Oversee third-party/supplier security and operational security controls.
• Partner with SOC and engineering teams to improve detection and response.
• Support client assurance and security audits.

Skills

CISSP/CISM

ISO27001/NIST/CIS/PCI DSS/GDPR

Leadership

Cloud security

SIEM/SOC

Incident response

Threat modelling

Stakeholder management

Tools

SIEM

SOC

Job description

We're looking for an experienced Head of Information Security to lead and strengthen a modern security function. This is a hands-on contract, working closely with the CTO and engineering teams to embed security across the product lifecycle.

Key responsibilities

• Own and evolve the information security strategy.
• Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance.
• Embed secure-by-design and DevSecOps across engineering.
• Drive security improvements through AI, automation and technical controls.
• Lead security risk, threat modelling, vulnerability management and incident response.
• Oversee third-party/supplier security and operational security controls.
• Partner with SOC and engineering teams to improve detection and response.
• Support client assurance and security audits.

Experience required

• CISSP, CISM or equivalent.
• Strong knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR.
• Proven leadership across information security, cyber risk or assurance.
• Strong technical understanding of cloud, application, network, endpoint and data security.
• Experience with SIEM/SOC, vulnerability management and incident response.
• Strong stakeholder management with a pragmatic, hands‑on approach