Head of Security Information Security

Opus Recruitment Solutions Limited; London Borough of Barking and Dagenham; Vor Ort; GBP 120.000 - 180.000; Vollzeit

Zusammenfassung

Opus Recruitment Solutions Limited is seeking an experienced Head of Information Security to lead and strengthen a modern security function. This hands-on contract role works closely with the CTO and engineering teams to embed security across the product lifecycle.

You will own the information security strategy, drive ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance, embed secure‑by‑design and DevSecOps, and advance security through AI, automation and strong incident response, vulnerability

Qualifikationen

• CISSP, CISM or equivalent.
• Strong knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR.
• Proven leadership across information security, cyber risk or assurance.
• Strong technical understanding of cloud, application, network, endpoint and data security.
• Experience with SIEM/SOC, vulnerability management and incident response.
• Strong stakeholder management with a pragmatic, hands-on approach.

Aufgaben

• Own and evolve the information security strategy.
• Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance.
• Embed secure-by-design and DevSecOps across engineering.
• Drive security improvements through AI, automation and technical controls.
• Lead security risk, threat modelling, vulnerability management and incident response.
• Oversee third-party/supplier security and operational security controls.
• Partner with SOC and engineering teams to improve detection and response.
• Support client assurance and security audits.

Kenntnisse

Leadership

Stakeholder management

Hands-on security

Jobbeschreibung

We’re looking for an experienced Head of Information Security to lead and strengthen a modern security function. This is a hands-on contract, working closely with the CTO and engineering teams to embed security across the product lifecycle.

Key responsibilities

• Own and evolve the information security strategy.
• Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance.
• Embed secure-by-design and DevSecOps across engineering.
• Drive security improvements through AI, automation and technical controls.
• Lead security risk, threat modelling, vulnerability management and incident response.
• Oversee third-party/supplier security and operational security controls.
• Partner with SOC and engineering teams to improve detection and response.
• Support client assurance and security audits.

Experience required

• CISSP, CISM or equivalent.
• Strong knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR.
• Proven leadership across information security, cyber risk or assurance.
• Strong technical understanding of cloud, application, network, endpoint and data security.
• Experience with SIEM/SOC, vulnerability management and incident response.
• Strong stakeholder management with a pragmatic, hands-on approach.