Strategic Cyber Security & Data Governance Lead

Allen Lane; Greater London; On-site; GBP 72,000 - 90,000; Full time

Job summary

Southwark Council is seeking a Head of Cyber Security and Information Governance to build and lead a new specialist cyber security team within the Digital and Resident Experience directorate. You will shape the cyber security strategy, drive improvements, and ensure resilience across the council while safeguarding residents’ data.

You will own incident response, oversee vulnerability management and security compliance, and work with partners to embed a security-conscious culture across the

Qualifications

• Experience leading and building a cyber security function in a large organisation.
• Knowledge of security operations, vulnerability management and compliance frameworks (PSN, Cyber Essentials, PCI DSS, UK GDPR).
• Experience coordinating cyber security incident responses with external agencies.
• Commitment to developing people and building inclusive teams.
• Desire to protect residents’ information and improve service outcomes.

Responsibilities

• Build and lead a new cyber security team within Southwark’s Digital and Resident Experience.
• Develop and own cyber security strategy, roadmap and improvement plans.
• Direct the outsourced Security Operations Centre and govern vulnerability management.
• Own incident response plans and lead security incident responses.
• Lead security compliance and information governance efforts across the council.

Skills

Cyber security leadership

Security operations

Incident response

Information governance

People development

Job description

Southwark Council is seeking a Head of Cyber Security and Information Governance to build and lead a new specialist cyber security team within the Digital and Resident Experience directorate. You will shape the cyber security strategy, drive improvements, and ensure resilience across the council while safeguarding residents’ data.

You will own incident response, oversee vulnerability management and security compliance, and work with partners to embed a security-conscious culture across the