Head of Information Security

Head of Information Security

Department: Tech - Security

Employment Type: Permanent - Full Time

Location: Oxford, UK

Reporting To: Chief Technology Officer

Aurora is a fast-growing, software‑focused global business. We are looking for an experienced Head of Information Security to shape and deliver the next phase of our Information Security strategy.

This is a high‑impact leadership role at the centre of Aurora’s continued growth as a global, data‑rich and increasingly software‑led business. You will lead and evolve our Information Security function, ensuring that security strategy, governance, controls and culture remain effective, proportionate, and aligned to business priorities.

You will work closely with senior leaders and operational teams across the business to ensure that security is embedded into how Aurora builds products, operates services, protects information, supports clients and scales internationally.

This role requires a leader who can combine strategic judgement, strong technical credibility and pragmatic delivery. You will help Aurora make sound risk‑based decisions, strengthen cyber resilience, and support the continued evolution of Aurora’s wider security and compliance operating model.

The successful candidate will thrive in a creative and intellectually stimulating environment, enjoy a high degree of autonomy, and have the opportunity to make a significant contribution to our digital strategy and long‑term resilience.

• Define, maintain and evolve Aurora’s Information Security strategy, roadmap and target operating model to support business growth, product development and international expansion
• Lead and develop the Information Security function, building organisational capability through a combination of central leadership, cross‑functional influence and clear ownership across the business
• Lead Information Security governance, risk and assurance activities, ensuring clear reporting, effective escalation and risk‑informed decision‑making at executive level
• Maintain Aurora’s Information Security risk management framework and risk register, ensuring key risks are identified, prioritised, communicated and addressed appropriately
• Provide assurance to internal and external stakeholders that Aurora’s security controls are effective, proportionate and aligned to business, customer and regulatory requirements
• Lead security assurance and certification activities, including ISO 27001, SOC 2, and related audit readiness, while contributing to the continued evolution of Aurora’s wider security and compliance operating model
• Partner with Legal and other relevant stakeholders on data protection, customer and supplier due diligence, contractual security commitments and third‑party risk management
• Help define how security responsibilities and capabilities are allocated across Aurora’s technology, legal/compliance and business functions, ensuring clear accountability, effective challenge and strong delivery
• Drive security by design across Aurora’s products, platforms, systems and infrastructure, working closely with engineering and technology leaders to embed secure architecture, secure development lifecycle practices and appropriate technical controls
• Strengthen capabilities across core security domains including identity and access management, privileged access, vulnerability management, incident response, disaster recovery, data protection, security awareness and supplier security
• Work closely with stakeholders at all levels of the organisation, including operational teams such as People & Culture, Business Infrastructure & Operations and Finance, to support audits, evidence gathering, control improvement and the effective adoption of security requirements across the organisation
• Lead response to significant information security incidents, acting as a senior decision‑maker during crisis situations and driving post‑incident learning and improvement
• Build a strong, pragmatic security culture across the organisation through effective awareness, engagement, coaching and leadership
• Manage the Information Security budget, financial forecasts and investment cases, ensuring that spend is…