Head of Cyber Security

Head of Cyber Security

Central London – 2 days per week on site

DV Clearance required (current or previously held)

This is a senior leadership opportunity within the Group CISO function, responsible for strengthening cyber assurance across both corporate IT and operational environments worldwide.

The role is based in Central London, with an expectation of two days per week on site.

Due to the nature of the environment, DV Clearance is required. Candidates must either currently hold DV or have previously held DV and be eligible to regain it.

This position reports directly to the CISO and forms part of the Information Security leadership team.

This is a strategic oversight role, providing enterprise-wide leadership across cyber assurance for both IT and OT networks globally.

You will shape how security expectations are defined and applied across the organisation, ensuring that risk is managed effectively while enabling critical programmes to move forward securely.

A key element of the role will involve contributing to a multi-year global initiative focused on enhancing OT security maturity and reducing risk across operational sites.

• Providing senior leadership across cyber assurance activities spanning enterprise IT and operational technology
• Ensuring security requirements are clearly defined, pragmatic and embedded across new initiatives and transformation programmes
• Acting as the senior security representative within governance and design forums
• Driving consistency in assurance, oversight and risk management practices across international sites
• Leading and developing a high-performing cyber assurance team
• Supporting executive decision-making through clear reporting on risk, trends and performance
• Helping shape and guide the ongoing evolution of OT security strategy and governance

• Proven experience operating in a senior cyber security leadership capacity
• Strong understanding of both IT and OT security risk landscapes
• Experience establishing or maturing assurance and oversight capabilities
• Ability to influence senior stakeholders and communicate complex risk in clear business terms
• Experience leading and developing cyber security professionals within regulated or sensitive environments

Relevant certifications such as CISSP, ISO 27001 or IEC 62443 are beneficial but not essential.