Chief Information Security Officer (CISO)

Our client is a leading organisation within the financial services sector seeking an experienced Chief Information Security Officer (CISO) to provide strategic and operational leadership across cybersecurity, information security governance, risk management, and regulatory compliance. This senior leadership position will play a pivotal role in shaping and delivering the organisation's security strategy during a significant business transformation programme and beyond.

This is a unique opportunity to shape and mature the security function of a transforming financial services organisation, driving a resilient and scalable cybersecurity framework.

Key Responsibilities

- Define and deliver the organisation's cybersecurity strategy and security roadmap.
- Lead the development and implementation of the target security operating model.
- Drive ISO 27001 readiness initiatives and provide cyber risk reporting to executive and board-level stakeholders.
- Maintain ownership of security architecture and ensure alignment with business and technology objectives.
- Oversee Identity and Access Management (IAM), Security Operations (SOC), vulnerability management, and incident response capabilities.
- Manage relationships with security vendors, managed service providers, and third-party suppliers.
- Lead third-party security risk management activities and assurance processes.
- Embed security requirements across business and technology transformation programmes.
- Develop and maintain security policies, standards, and governance frameworks.
- Maintain cyber risk registers and provide regular reporting on security posture and emerging threats.
- Oversee the performance and effectiveness of managed security services, including detection and response capabilities.
- Support the delivery of security transition and operational readiness programmes.

Skills, Knowledge and Expertise

- Proven experience in a senior cybersecurity leadership role, such as Security Lead, Head of Information Security, or CISO.
- Strong background in cybersecurity governance, enterprise risk management, and information security leadership.
- Demonstrable experience delivering security programmes within complex and regulated environments.
- Strong knowledge of regulatory compliance requirements and recognised security frameworks, including ISO 27001.
- Experience managing third-party suppliers, outsourced security services, and vendor risk.
- Excellent stakeholder management skills, with experience engaging executive leadership and board-level audiences.
- Strong understanding of security architecture, IAM, security operations, vulnerability management, and incident response.
- Excellent communication, influencing, and decision-making capabilities.