Strategic Information Security Leader

Tower Hamlets Homes Ltd; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Tower Hamlets Council is seeking a Head of Information Security to lead the council's cyber security agenda across a complex, matrixed organisation, shaping strategy, policy and risk management. You will drive enterprise information security, align to CAF for Local Government, manage governance reporting to the board, and oversee incident response, risk assessments, and third‑party security.

The role requires senior leadership, excellent stakeholder influence, and professional certifications

Qualifications

• Strong cyber leadership credentials in a complex matrixed organisation.
• Ability to shape and execute an enterprise-level cyber security strategy.
• Experience with CAF for Local Government and ISMS/Risk Frameworks.
• Plan over short, medium and long-term timeframes with alignment to risk appetite.
• Clear, concise advice to senior management on cyber security.

Responsibilities

• Develop and deliver information security strategic objectives aligned to business needs.
• Maintain and refresh the information security framework and program annually.
• Lead governance and reporting to the board and executives on security posture.
• Deliver council-wide information security training and awareness programs.
• Coordinate incident response, disaster recovery and business continuity planning.
• Oversee vulnerability management, patching, MDR, SIEM and SOAR services.
• Ensure third-party information security risk management and audits are supported.

Skills

Cyber leadership

Executive communication

Information security strategy

Risk management

CISM

CISSP

CISA

Stakeholder engagement

Education

CISM certification

CISSP certification

CISA certification

Job description

Tower Hamlets Council is seeking a Head of Information Security to lead the council's cyber security agenda across a complex, matrixed organisation, shaping strategy, policy and risk management. You will drive enterprise information security, align to CAF for Local Government, manage governance reporting to the board, and oversee incident response, risk assessments, and third‑party security.

The role requires senior leadership, excellent stakeholder influence, and professional certifications