Key Responsibilities: Strategic Direction & Policy Framework:
- Define, develop, and maintain a business-aligned Information and Cybersecurity strategy.
- Establish and embed an Information Security Policy Framework that complies with industry standards and legislative requirements.
- Advise the senior leadership team on the integration of security practices into organizational processes.
Leadership & People Management:
- Develop and lead a high-performance Information Security team, attracting and retaining key talent.
- Foster a culture of innovation and continuous improvement within the Information Security unit.
- Establish clear and measurable strategic plans, budgets, and targets for the Information Security team.
Risk Management & Security Operations:
- Provide leadership and oversight of effective information and Cybersecurity risk management.
- Ensure the management of security risks related to suppliers and delivery partners.
- Develop and maintain an Information Security Management System (ISMS) with processes for continual improvement.
Compliance & Incident Management:
- Ensure compliance with relevant laws and regulations,
including PCIDSS and ISO 27001 standards.
- Direct investigations into security breaches and liaise with the Information Rights team on data protection legislation.
- Promote a strong information security culture across the organization.
Required Qualifications
- A list of the educational and professional qualifications required for the position.
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
- Extensive experience in senior management within a complex IT organization, including service delivery, application development, and IT infrastructure.
- Proven track record in managing and delivering transformational security improvements across an organization.
- Robust understanding of Information Security best practices, risk management, and relevant standards (e.g., ISO 27001, PCIDSS).
- Experience in leading, developing, and motivating a team of security professionals.
- Strong strategic thinking, leadership, and stakeholder management skills.