Senior IT Security Leader: Strategy, Risk & Secure Innovation

Capsticks LLP; Greater London; On-site; GBP 90,000 - 150,000; Full time

Job summary

Capsticks LLP seeks a senior IT security leader to define, implement and assure the firm’s information and cyber security posture. This new leadership role has broad responsibility for security strategy, standards, controls and services, aligned to CISO capability.

You will lead a proactive, risk-based approach to security across governance, architecture, data, platforms and operations, embedding security into design, delivery and service enablement.

Qualifications

• Senior IT security leadership experience, ideally with CISO-level responsibilities.
• Strong knowledge of security operations, IAM, cloud and network security.
• Experience with ISO27001, Cyber Essentials Plus and CIS/NIST frameworks.
• Ability to translate risk and compliance into practical controls and services.
• Experience managing teams, vendors and security services in SaaS/professional services.

Responsibilities

• Define and implement security strategy, standards and controls aligned to ISO27001 and Cyber Essentials Plus.
• Oversee security operations: SOC, SIEM, XDR, vulnerability management and incident response.
• Embed security by design into projects, architecture and delivery.
• Maintain ISMS, support audits and meet regulatory and client expectations.
• Provide clear reporting on security posture, risks and improvements to stakeholders.
• Promote security awareness and practical secure behaviours across the firm.

Skills

Security leadership

ISO27001

Cyber security strategy

Cloud security

Zero Trust / ZTNA

SOC / SIEM / XDR

Risk management

Governance & Risk

Stakeholder engagement

Tools

Vulnerability management

Incident response

Job description

Capsticks LLP seeks a senior IT security leader to define, implement and assure the firm’s information and cyber security posture. This new leadership role has broad responsibility for security strategy, standards, controls and services, aligned to CISO capability.

You will lead a proactive, risk-based approach to security across governance, architecture, data, platforms and operations, embedding security into design, delivery and service enablement.