Global Cyber Security and Compliance Director

Global Cyber Security and Compliance Director

United Kingdom

About the job:

Kent is looking for a Global IT Security and Compliance Director who will be responsible for developing, implementing, and monitoring a strategic, comprehensive enterprise cybersecurity and IT risk management program. The role will provide the vision and leadership necessary to manage the risk to Kent and ensure business alignment, effective governance, systems integrity, and confidentiality.

As a key leader of Kent’s CDIO office reporting directly to the Chief Digital and Information Officer, the Global IT Security and Compliance Director focuses on governance, risk and compliance aspects of security within the business. The role holder shall further develop and maintain information security policies and processes, ensure appropriate technical cyber defence is in place, and manage employee security awareness training.

This role serves as a critical resource for employees and leaders regarding information security policy implementation, interpretation, and compliance. The role assesses and prioritises information security and cybersecurity risk across the organization, facilitates compliance with regulatory requirements and information security policies, and develops and reports on information security metrics monthly and maturity models.

The role is responsible for reducing information security and cybersecurity risk to Kent by helping to prioritise and drive remediation efforts throughout the organization through the following:

• Acting as a strategic partner to digital, engineering, and delivery leaders to enable secure innovation while managing enterprise, technology, and operational risk.
• Establishing Cyber Strategy and roadmap.
• Establishing and maintaining governance and compliance standards.
• Conducting risk assessments to identify vulnerabilities internally and within vendor or third‑party supplier products.
• Creating, maintaining, communicating, and enforcing information security policies.
• Advising CDIO and senior executive leadership on risk management, including risk mitigation, risk reduction, risk transfer, the risk exception process and residual risk analysis.
• Working with technical teams to ensure adequate cyber protection.
• Measuring and driving maturity improvements, adoption and creating security roadmaps.
• Chairing Kent’s security council.
• Representing as a futuristic leader on secure adoption of new application and AI technologies.

The role supports the CDIO and advisory external consultancy on the execution of the Information & Cyber Security Strategy.

Skills and Responsibilities:
Responsibilities:

Governance and Compliance

• Develops and owns overall security strategy.
• Owns and manages process for Incident Detection, Containment, Analysis and Response.
• Evaluates new cybersecurity threats and IT trends and develops effective security controls.
• Oversees development of security awareness programs.
• Evaluates potential security breaches, coordinates response, and recommends corrective actions.
• Define and report on information security metrics.
• Review technology architectures and ensure alignment with security best practices.
• Provide governance and oversight for the secure and responsible adoption of AI technologies, including data privacy and protection, model risk, ethical considerations, and compliance with emerging regulatory expectations.
• Oversee security governance for engineering platforms, automation tools, and system integrations, ensuring appropriate controls, access management, and resilience aligned to Kent’s digital delivery model.
• Provide governance and oversight of secure application development practices, ensuring security is embedded across the full software development lifecycle and modern Dev Ops delivery models.
• Maintains current knowledge of industry and regulatory trends and developments for the enterprise technology.
• Develops and oversees effective disaster recovery and BCP policies and standards to align with company business continuity management program goals. Coordinates development of implementation plans and procedures to ensure business critical services are recovered in the event of…