Cyber Security Principal

The Cyber Security Principal is a hands‑on senior role, strengthening Tecknuovo’s internal information and cyber security posture while also delivering external advisory and commercial value through customer‑facing security expertise. This role works closely with Delivery, Technical, IT, and Business Operations leaders.

The role provides strategic oversight of Tecknuovo’s cyber and information security maturity, ensuring security governance, risk management, compliance obligations, and the secure adoption and governance of AI technologies are not only maintained but continuously strengthened as the business scales. The role is also accountable for delivering security advisory and assurance services to public sector and regulated clients, building Tecknuovo’s market credibility and contributing to revenue growth through security‑led opportunities.

Combining strategic leadership, operational influence, and commercial delivery, the Cyber Security Principal acts as the security equivalent to our Technical Director function with accountability for security quality, assurance, governance, and innovation across both the business and client environments.

• Own and evolve Tecknuovo’s Information Security Management System, ensuring ISO 27001 compliance is embedded into operational practice and supported by scalable, practical governance
• Define and maintain the organisation’s cyber security strategy, threat model, risk appetite, and prioritised roadmap, translating complex risks into clear actions and leadership decisions
• Act as the senior strategic security advisor to the executive board, providing horizon scanning, risk insight, and recommendations on security investment, controls, and resilience
• Provide security oversight, mentorship, and strategic direction to the IT Manager, supporting capability development while maintaining clear separation from day‑to‑day operational ownership
• Support Business Operations leadership in embedding security within broader assurance, compliance, and governance frameworks, including ISO standards and audit readiness
• Lead internal security reviews, penetration testing programmes, incident response planning, and business continuity activities from a security perspective
• Establish and strengthen a security‑aware culture across the business, including employed teams, freelance consultants, suppliers, and third parties
• Advise on AI governance, emerging technologies, and associated security implications, working closely with Technical and AI programme stakeholders
• Deliver senior security advisory and assurance services to public sector and regulated clients, acting as a trusted advisor across security risk, assurance, and architecture engagements
• Shape and deliver security‑focused work streams within wider transformation programmes, partnering with client security and risk leaders to ensure credible, defensible delivery
• Identify, qualify, and support the growth of security advisory opportunities across existing accounts and new prospects, contributing to a revenue‑generating security service line
• Support bids, proposals, and procurement submissions by shaping security narratives, compliance positioning, assurance frameworks, and security architecture content
• Produce market‑facing thought leadership, case studies, and security insights that strengthen Tecknuovo’s reputation as a credible security partner
• Build and mature internal security capability, frameworks, standards, tooling, and methodologies that support both internal governance and client delivery
• Develop security capability pathways and mentoring structures that strengthen internal talent and reduce dependency, aligned to Tecknuovo’s broader capability‑building philosophy
• Maintain oversight of data protection, privacy, and contractual security obligations, working with leadership on UK GDPR, governance, and client security commitments
• Contribute security expertise into wider business initiatives including B‑Corp, ESG, ISO 42001 readiness, and enterprise risk management frameworks

You are an experienced security leader who has built, led, and matured cyber and information…