Chief Information Security Officer

The team you'll be working with:

Account Security Director (vCISO) Role Purpose The Account Security Director (vCISO) is the senior security leader responsible for security governance, assurance and strategic security oversight across a major client account. Acting as the primary security interface between the client security organisation, account leadership and service delivery teams, the role ensures security requirements are understood, embedded and effectively managed throughout the service lifecycle.

The role provides trusted security leadership, independent challenge and executive-level advice to ensure services remain aligned with business objectives, contractual obligations, organisational policies, regulatory expectations and risk appetite. Through effective stakeholder engagement and influence, the Account Security Director drives security outcomes, operational resilience and continual improvement in security maturity and assurance effectiveness.

What you'll be doing:

Strategic Security Leadership & Client Partnership Act as the senior security representative for the account. Build trusted relationships with client security, technology, risk, compliance, audit and business stakeholders. Serve as the primary point of contact for strategic security matters across the account. Provide strategic security advice and guidance to client executives, account leadership and delivery teams. Represent security interests within governance, operational, service review and transformation forums.

Influence senior stakeholders to support effective risk-based decision making. Act as a trusted advisor on security, resilience, compliance and risk matters. Act as an escalation point for significant security issues affecting the account. Facilitate effective communication between business, operational and technical stakeholders. Promote a positive security culture across the account and wider delivery organisation. Governance, Risk, Assurance & Security Oversight Own, maintain and continually improve the Account Security Management Plan and associated security governance arrangements.

Ensure the Security Management Plan remains aligned with client requirements, contractual obligations, organisational policies and industry good practice. Establish and maintain effective security governance and reporting arrangements across the account. Ensure security risks are identified, assessed, communicated and managed in accordance with business objectives and risk appetite. Provide independent oversight and challenge of security controls, assurance activities and risk treatment plans.

Ensure security requirements are understood, embedded and effectively managed throughout service delivery activities. Drive accountability for security outcomes across delivery, operational and support teams. Provide oversight of security posture, control effectiveness, risks, issues and remediation activities. Ensure security obligations, commitments and compliance requirements are met and evidenced. Support internal audit, external audit and client assurance activities. Challenge decisions, practices or activities that introduce unacceptable levels of security risk.

Ensure security considerations are embedded within service delivery, operational processes, change activities and service improvement initiatives. Drive remediation of security risks, audit findings and control weaknesses through to completion. Provide meaningful security reporting, assurance and management information to stakeholders. Promote transparency, ownership and continual improvement across the account. Security Architecture and Design Authority Provide strategic security architecture oversight across the account, ensuring security requirements are reflected within technology strategy, solution design and service evolution.

Act as the security authority for the review and challenge of significant architectural, technology and service changes. Ensure security-by-design principles are embedded throughout the service lifecycle and considered within all material design decisions. Assess the impact of architectural decisions on security risk, operational resilience, compliance obligations and business objectives. Provide independent security challenge to proposed solutions, identifying opportunities to improve security, resilience and risk management outcomes.

Work collaboratively with client architects, service architects and delivery teams to ensure security architecture principles are consistently applied. Support transformation initiatives by providing strategic security guidance and architecture oversight. Ensure security architecture considerations are integrated into service roadmaps and future-state planning. Maintain awareness of emerging technologies, threats and industry practices to ensure security architecture remains effective, proportionate and aligned with business objectives.

Regulatory, Contractual and Compliance Oversight Maintain a strong understanding of…