Non-Executive Director - Cyber Security and Information Risk

Ned Capital; Greater London; On-site; GBP 40,000 - 70,000; Part time

Job summary

Ned Capital is seeking a Non-Executive Director with senior cyber-security and information-risk expertise to strengthen the board’s oversight of significant cyber risk. This governance appointment focuses on oversight, challenge, and informed judgement, not day-to-day security operations.

The successful candidate will communicate technical risk in business terms, contributing as a full board member with independence and integrity.

Qualifications

• Senior career in cyber security or information risk (e.g. CISO or equivalent).
• Credible understanding of cyber-security governance, information risk, and regulatory expectations.

Responsibilities

• Provide oversight and constructive challenge at board level.
• Govern cyber-security posture and information risk without running the function.
• Translate security credibility into board-level contribution as a full board member.

Skills

Senior cyber security

Information risk governance

Board communication

Independence

Governance oversight

Job description

The opportunity

A UK organisation is seeking a Non-Executive Director with senior cyber-security and information-risk expertise to strengthen its board’s oversight of one of the most significant risks it faces. Cyber security is now unmistakably a board-level and business-wide concern rather than a technical one — a serious incident can threaten operations, finances, reputation and regulatory standing at once — and boards increasingly value a director who can bring genuine, informed judgement to it.

This is a governance appointment, not an operational one. The role is to provide oversight and constructive challenge — helping the board understand, question and govern the organisation’s cyber-security posture and information risk — not to run the security function or lead incident response, which remain the responsibility of management and its specialists. The successful candidate will translate deep security credibility into effective board-level contribution as a full member of the board.

What we’re looking for

• A senior career in cyber security or information risk (for example Chief Information Security Officer, CISO, or equivalent senior security leadership)


• A credible, current understanding of cyber-security governance, information risk, and the regulatory and reporting expectations around them


• The ability to operate at board level — oversight and challenge, not execution — and to communicate technical risk in terms the whole board can engage with


• Independence, integrity, and the judgement to think beyond a single specialism as a full board member


• Existing board experience is welcome; we will also consider first‑time non-executives of the right calibre with a genuine appetite for governance