CrawlJobs Logo

Head of Cyber Security Culture and Architecture

allenlane.co.uk Logo

Allen Lane

Location Icon

Location:
United Kingdom , Hanslope Park (Milton Keynes) or East Kilbride

Category Icon

Job Type Icon

Contract Type:
Employment contract

Salary Icon

Salary:

69500.00 - 90600.00 GBP / Year

Job Description:

Grade 6 vacancy in the Information and Cyber Security Department. Responsible for defining, leading and delivering the FCDO’s secure architecture and internal cyber security culture. Member of the ICSD Senior Leadership team and IDD Extended Leadership Group.

Job Responsibility:

  • Define, lead and deliver, through their team, the FCDO’s secure architecture and its internal cyber security culture
  • Ensure secure design is embedded across systems and services while fostering a workforce that understands, values and upholds security principles
  • Lead a team of security architects who will influence technology delivery, organisational behaviours and leadership decision making
  • Ensure architecture, awareness and cultural resilience are delivered in a coordinated way
  • Work in partnership with business, digital and security stakeholders
  • Lead engagement and reporting for their workstreams
  • Represent the CISO at various HMG and external events where necessary

Requirements:

  • Enterprise Security Architecture: Leading the design and assurance of enterprise security architecture, applying recognised frameworks and principles
  • Technical Security Architecture: Applying security architectural principles to complex IT and operational technology (OT) systems
  • Policy and Standards: Providing subject matter expertise in developing and interpreting cyber and information security policies and standards
  • Information Security Culture: Baselining the future vision for the FCDO’s information and cyber security culture, defining and assuring delivery of change levers
  • Third Party Management: Leading the definition and assurance of cyber and information security requirements for third-party relationships
  • Management, Leadership and Influence: Embedding a security first culture and influencing behaviours at all levels
  • Must hold or be willing to obtain security clearance to DV level
  • Must have been resident in the UK for five out of the last ten years immediately prior to application
What we offer:
  • Civil Service pension scheme (employer contribution of 28.97%)
  • Annual leave starting at 25 days leave per annum
  • Location allowance of £1,750 (if based in Milton Keynes)
  • Specialist allowance of up to £10,800 per annum (subject to review)

Additional Information:

Job Posted:
December 05, 2025

Employment Type:
Fulltime
Work Type:
On-site work
Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for Head of Cyber Security Culture and Architecture

Head of cyber threat exposure and attack surface management

Lead the enterprise-wide Continuous Threat Exposure Management (CTEM) strategy, ...
Location
Location
United Kingdom , Knutsford
Salary
Salary:
Not provided
barclays.co.uk Logo
Barclays
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Experience in cybersecurity with direct exposure to vulnerability management, red teaming, or threat exposure reduction
  • Proven track record leading programs integrating CSPM, SSPM, ASM, BAS, or exposure correlation technologies
  • Strong understanding of attack paths, adversary emulation, and continuous validation concepts
Job Responsibility
Job Responsibility
  • Own and drive the global CTEM strategy, establishing a continuous, threat-driven exposure management lifecycle aligned with NIST, MITRE, and CISA Secure-by-Design principles
  • Lead and develop a high-performing CTEM team, fostering collaboration, technical excellence, and an outcome-driven culture
  • Integrate and oversee key exposure management technologies, including Cloud Security Posture Management (CSPM), SaaS Security Posture Management (SSPM), Attack Surface Management (ASM), Breach & Attack Simulation (BAS), and other exposure correlation platforms
  • Correlate assets, identity, vulnerability, and configuration to identify high-impact, exploitable attack paths and inform prioritized remediation strategies
  • Collaborate with Application Security, Vulnerability Management, Red Team, and Security Operations to synchronize discovery, validation, and remediation of exposures across the enterprise
  • Align CTEM outputs with real-world adversary behaviors, leveraging Red Team and Threat Intelligence input to validate attack paths and focus on exploitable conditions
  • Drive automation and AI-enabled analytics to continuously map, assess, and measure reductions in the organization’s attack surface
  • Translate technical findings into business risk language, enabling senior leadership and risk committees to make data-driven investment decisions
  • Define and lead CTEM governance and operating models, ensuring exposure assessments, validation, and remediation tracking are embedded in operational processes
  • Establish clear KRIs and maturity metrics that demonstrate continuous improvement in visibility, validation, and response effectiveness
What we offer
What we offer
  • Competitive holiday allowance
  • Life assurance
  • Private medical care
  • Pension contribution
  • Fulltime
Read More
Arrow Right

Head of Cyber Security

The Head of Cyber Security plays a critical role in strengthening Solaris’ cyber...
Location
Location
Germany , Berlin
Salary
Salary:
Not provided
solarisbank.com Logo
Solarisbank
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Computer Science, Information Security, Information Technology, Engineering, or a related field
  • Extensive, hands-on cyber security leadership experience, including a proven track record leading first-line cyber security teams, and implementing technical controls in regulated environments
  • Demonstrated success designing and executing cyber security strategies and programmes in complex, regulated environments
  • Strong knowledge of recognised frameworks and regulatory standards (e.g., NIST, ISO 27001, DORA, PCI DSS, SWIFT CSP, MaRisk)
  • Business-fluent English (written and spoken)
  • Strong analytical and problem-solving skills, with sound judgement under pressure
  • Proactive, ownership-driven, and a collaborative partner to Technology and the wider business
  • Structured and hands-on working style
  • comfortable operating both strategically and operationally
Job Responsibility
Job Responsibility
  • Develop and execute a comprehensive cybersecurity strategy aligned with the overall business objectives and regulatory requirements
  • Drive a culture of security awareness and accountability throughout the organization
  • Lead, mentor, and develop a high-performing and semi-autonomous cybersecurity team consisting of 10 team members covering areas like: Offensive Security, Product Security, Cyber Defense Center, Platform & Operations Security, Identity & Access Management
  • Identify, assess, and prioritize cybersecurity risks, vulnerabilities, and threats
  • Implement robust risk mitigation measures to safeguard all digital assets, products, services, customer data, and infrastructure
  • Ensure compliance with relevant cybersecurity laws, regulations, and industry standards, namely DORA, PCI DSS, SWIFT CSP and ISO 27001
  • Establish and maintain effective governance frameworks, guidelines, and procedures to support continuous improvement in cybersecurity practices
  • Oversee the operation and optimization of security technologies, tools, and processes on Preventive Security, Offensive Security, Product Security, Cyber Defense Center, Projects & Architecture and Support and Operations in an effective way
  • Monitor the security posture of networks, systems and applications through proactive threat intelligence and security monitoring
  • Lead the security incident response team in managing cybersecurity incidents and breaches promptly and efficiently
What we offer
What we offer
  • Home office budget
  • Learning & development budget of €1000 per year and a transparent growth framework to support your career goals
  • Competitive salary and a variable remuneration program
  • Monthly meal allowance
  • Deutschland ticket subsidy
  • 28 vacation days, increasing by 2 days after 2 years and 3 days after 3 years with Solaris
  • Opportunity to work abroad for up to 12 weeks per year
  • Monthly trips are reimbursed in line with our travel policy
  • Fulltime
Read More
Arrow Right
New

Head of Cyber Security

As our Head of Cyber Security, your mission is to lead and develop the organisat...
Location
Location
United Kingdom , Park Royal
Salary
Salary:
Not provided
jobs.360resourcing.co.uk Logo
360 Resourcing Solutions
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Proven experience in head or senior leadership role in security, cyber or information assurance
  • CISSP, CISM, or CISA certified (or equivalent)
  • Strong track record of building and delivering security programs aligned to ISO 27001, NIST, PCI DSS, Cyber Essentials Plus
  • Hands-on experience across cloud platforms (Azure, AWS), on-premise networks, and hybrid architectures
  • A zero-trust approach to cyber security
  • Confident in leading security tooling selection and implementation
  • Deep understanding of data protection legislation and risk management frameworks
  • Strong leadership, stakeholder engagement, and influencing skills
Job Responsibility
Job Responsibility
  • Develop, own and maintain our Security Strategy and Roadmap
  • Represent security at the senior leadership and board level
  • Define and implement robust security policies, frameworks and operating models
  • Ensure ongoing compliance with relevant legislation and best practices
  • Lead on operational security including responses to security incidents, ensuring containment, recovery and lessons learned
  • Manage enterprise security risk through owning risk assessments, tracking key risk indicators and regular reporting on exposure
  • Drive a culture of security awareness through partnering across different business areas, staff training and phishing simulations
What we offer
What we offer
  • Competitive salary
  • Pension
  • 22 days annual leave, plus the option to buy additional days
  • Life Assurance
  • Private Medical
  • Onsite parking
  • Bonus
  • Fulltime
Read More
Arrow Right

Head of Security

As our Head of Security, you’ll play a critical role in protecting the trust our...
Location
Location
Australia , Sydney
Salary
Salary:
Not provided
prezzee.com.au Logo
Prezzee
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • A degree in Computer Science, Software Engineering, or a related discipline
  • 5+ years’ experience in a senior cyber security role, ideally within a systems development or technology-led environment
  • Strong understanding of AWS technologies and modern cloud architecture models
  • Proven experience delivering strategic security programs, including policy development, risk management, BCP/DR testing, third-party risk, and end-user device security
  • Hands-on experience triaging, investigating, and resolving security and operational incidents within SLAs
  • Deep knowledge of modern cyber security principles, threat landscapes, threat intelligence, and remediation techniques
  • Experience coordinating outcomes across internal teams, external vendors, auditors, and security partners
  • A collaborative, business-minded approach with the confidence to influence at leadership level
Job Responsibility
Job Responsibility
  • Lead Our Security Strategy: Own and deliver a clear, ongoing security roadmap aligned to Prezzee’s risk appetite, business priorities, and growth plans
  • Continuously uplift our administrative, technical, and procedural security posture across the business
  • Stay ahead of emerging threats and evolving standards, ensuring Prezzee remains proactive rather than reactive
  • Build a Security-First Culture: Act as the Security Champion across all teams and locations, embedding security awareness into how we work every day
  • Partner closely with engineering, product, IT, and the wider business to ensure security is at the forefront of design
  • Manage and mentor a small, high-performing security team, driving engagement and alignment with Prezzee’s purpose
  • Governance, Risk & Compliance: Maintain and expand compliance with frameworks and certifications including PCI, ISO:27001, Cyber Essentials+, ISO:42001 and others as required
  • Chair and manage the ISMS Committee, ensuring stakeholders have clear visibility of risks, controls, and progress
  • Lead third-party and vendor security due diligence across tools, partners, and workplace technology
  • Operational Security & Incident Management: Oversee vulnerability management, penetration testing outcomes, and remediation within agreed SLAs
What we offer
What we offer
  • Prezzeeversary Leave – Extra day of annual leave for each year you’re with us
  • BirthYay Leave – Celebrate you with a paid day off during your birthday month
  • Novated Car Leasing – A tax-smart way to bundle and pay for your car and running costs
  • ClassPass Membership – Fully covered monthly credits for fitness, wellness, and beauty
  • Office Allowance – One-time payment to upgrade your office setup
  • Flexible Work Perks – Flex your hours, take Culture Swap Days, and work from anywhere for 30 days a year
  • Prezzee Staff Discounts – Exclusive deals on Prezzee gift cards – just for being part of the team
  • Wellbeing Support – Access to mental, social, financial, and physical wellbeing support via Telus
  • Learning & Development – Grow your career with LinkedIn Learning, job shadowing, industry programs, and our Lunch & Learn sessions
  • Employee Resource Groups – Be an advocate or ally and foster belonging through groups like EmpowHer and Pride
  • Fulltime
Read More
Arrow Right

Head of Security

Prezzee is a global leader in digital gifting and payments. As our Head of Secur...
Location
Location
Australia , Melbourne
Salary
Salary:
Not provided
prezzee.com.au Logo
Prezzee
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • A degree in Computer Science, Software Engineering, or a related discipline
  • 5+ years’ experience in a senior cyber security role, ideally within a systems development or technology-led environment
  • Strong understanding of AWS technologies and modern cloud architecture models
  • Proven experience delivering strategic security programs, including policy development, risk management, BCP/DR testing, third-party risk, and end-user device security
  • Hands-on experience triaging, investigating, and resolving security and operational incidents within SLAs
  • Deep knowledge of modern cyber security principles, threat landscapes, threat intelligence, and remediation techniques
  • Experience coordinating outcomes across internal teams, external vendors, auditors, and security partners
  • A collaborative, business-minded approach with the confidence to influence at leadership level
Job Responsibility
Job Responsibility
  • Lead Our Security Strategy: Own and deliver a clear, ongoing security roadmap aligned to Prezzee’s risk appetite, business priorities, and growth plans
  • Continuously uplift our administrative, technical, and procedural security posture across the business
  • Stay ahead of emerging threats and evolving standards, ensuring Prezzee remains proactive rather than reactive
  • Build a Security-First Culture: Act as the Security Champion across all teams and locations, embedding security awareness into how we work every day
  • Partner closely with engineering, product, IT, and the wider business to ensure security is at the forefront of design
  • Manage and mentor a small, high-performing security team, driving engagement and alignment with Prezzee’s purpose
  • Governance, Risk & Compliance: Maintain and expand compliance with frameworks and certifications including PCI, ISO:27001, Cyber Essentials+, ISO:42001 and others as required
  • Chair and manage the ISMS Committee, ensuring stakeholders have clear visibility of risks, controls, and progress
  • Lead third-party and vendor security due diligence across tools, partners, and workplace technology
  • Operational Security & Incident Management: Oversee vulnerability management, penetration testing outcomes, and remediation within agreed SLAs
What we offer
What we offer
  • Prezzeeversary Leave – Extra day of annual leave for each year you’re with us
  • BirthYay Leave – Celebrate you with a paid day off during your birthday month
  • Novated Car Leasing – A tax-smart way to bundle and pay for your car and running costs
  • ClassPass Membership – Fully covered monthly credits for fitness, wellness, and beauty
  • Office Allowance – One-time payment to upgrade your office setup
  • Flexible Work Perks – Flex your hours, take Culture Swap Days, and work from anywhere for 30 days a year
  • Prezzee Staff Discounts – Exclusive deals on Prezzee gift cards – just for being part of the team
  • Wellbeing Support – Access to mental, social, financial, and physical wellbeing support via Telus
  • Learning & Development – Grow your career with LinkedIn Learning, job shadowing, industry programs, and our Lunch & Learn sessions
  • Employee Resource Groups – Be an advocate or ally and foster belonging through groups like EmpowHer and Pride
  • Fulltime
Read More
Arrow Right
New

Head of IT

At James Fisher, we recognise IT as a critical enabler of the performance, effic...
Location
Location
United Kingdom , Aberdeen
Salary
Salary:
Not provided
james-fisher.com Logo
James Fisher
Expiration Date
April 13, 2026
Flip Icon
Requirements
Requirements
  • Senior IT leadership experience in business‑facing roles, with broad exposure across applications, infrastructure, cyber, architecture and service management
  • Strong track record delivering Divisional/BU technology change, managing application lifecycles and working end‑to‑end across the SDLC using Group toolchains
  • Proven ability to integrate Group shared services with local needs and govern IT projects using waterfall, agile and hybrid methods
  • Confident stakeholder engager, able to translate business priorities into technology outcomes and influence at senior levels
  • Strong commercial and operational understanding, linking technology decisions to business value
  • Degree‑level education (or equivalent), ideally with ITIL certification
  • Collaborative, relationship‑focused and able to balance Divisional agility with Group standards
  • Pragmatic, outcomes‑driven and commercially aware, with a focus on value for money
  • Calm, credible and resilient when navigating complexity and competing demands
  • Passionate about using technology to support performance, improvement and growth
Job Responsibility
Job Responsibility
  • Ensure Divisional IT services meet agreed scope, service levels and cost, integrating effectively with Group IT
  • Oversee joined‑up service delivery across Product Lines, including Divisional IT leads, suppliers and performance management
  • Manage the lifecycle of Divisional applications and oversee IT projects to ensure secure, reliable and standards‑aligned delivery
  • Work with Group Architecture, Platforms and Cyber to align solutions and reduce duplication and technical risk
  • Act as the Division’s senior technology partner, shaping priorities and roadmaps that support growth, resilience and operational needs
  • Identify and champion opportunities where digital, data and technology improve efficiency, agility and risk management
  • Lead the secure integration of IoT/OT with enterprise IT, managing digital risk and aligning with Group standards while supporting business‑led innovation
  • Operate within a shared IT model, ensuring compliance with Group strategy and standards while representing Divisional needs
  • Support a collaborative “One IT” culture across the wider Group, contributing to alignment, talent development and best‑practice sharing
What we offer
What we offer
  • Competitive salary and benefits package aligned with experience (Private Medical Insurance, Life Assurance, Cycle to work scheme, Company Pension, etc.)
  • Clear pathways for career development and organisational visibility
  • Inclusive and supportive culture that values individual contributions
  • Meaningful work with impact across safety, innovation, and global operations
  • Fulltime
Read More
Arrow Right

Technology - Cybersecurity, Summer Analyst

At Citi, we do not just adapt to change – we drive it. Our Summer Technology Ana...
Location
Location
Poland , Warsaw
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Be graduating between December 2026 and May 2027
  • Pursuing bachelor's degree in Cyber Security, Computer Science, Computer Engineering, Information Technology, Management Information Systems, or other tech related degree
  • You have an interest working in a high-tech global technology environment and have a fundamental understanding of technologies, including by not limited to programming languages (C++, Java, etc.), application development, or basic concepts of relational databases
  • Be a problem solver who thrives on innovation and enjoys tackling challenges head-on
  • Possess a global outlook and a willingness to collaborate across cultures and time zones
  • Have excellent communication skills, project management, leadership, attention to detail, and the ability to work well within diverse teams
  • Ability to pass technical interviews consisting of basic algorithmic programming exercises
  • Must be collaborative and adaptable, with excellent communication skills
  • Prior experience working on agile teams is desirable.
Job Responsibility
Job Responsibility
  • Keep the bank safe and provide the technical tools our workers need to be successful
  • Design our digital architecture and ensure our platforms provide a first-class customer experience
  • Manage risk, resources, and program management
  • Focus on enterprise resiliency and business continuity
  • Develop, coordinate, and execute strategic operational plans.
What we offer
What we offer
  • Structured learning
  • Networking
  • Mentoring and development programs
  • Competitive salary
  • Global exposure with cross-functional teams.
  • Fulltime
Read More
Arrow Right

Head of IT Software Development

The Head of IT Software Development is accountable for the end-to-end delivery, ...
Location
Location
Greece , Athens
Salary
Salary:
Not provided
vodafone.com Logo
Vodafone
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 6+ years of experience in senior technical position, preferably in building and managing Product or IT delivery organizations
  • 5-7 years of leadership responsibilities in large delivery organizations, managing cross-functional teams and/or organization-wide programs, influencing senior-level management and key stakeholders effectively within complex context
  • Experience in major telecommunications BSS/OSS systems, including CRM, Billing, Service Fulfilment and Activation is advantage
  • Extensive experience in IT strategic planning, organization design and development
  • Experience in leading engineering functions in complex and dynamic environments
  • Solid experience in establishing agile principles and processes within large engineering organizations
  • Exposure to disruptive technologies, by actively being involved in tracking, scouting, experimenting and defining current and future strategies & evolution roadmap
  • Design and deliver complex implementation and integration of software systems, managing agile delivery at scale
  • Excellent analytical skills and ability to evaluate options and outcomes and make informed data driven decisions
Job Responsibility
Job Responsibility
  • Own and oversee several IT core systems – mostly Oracle suit – where you will be ultimately responsible for delivery of commercial roadmap, systems life cycle management – modernization and cloudification, cyber security assurance, etc.
  • Lead and evolve multiple development teams (internal + vendors), improving speed, quality, efficiency, and predictability of delivery
  • Establish and maintain IT development standards and SDLC governance across teams and suppliers
  • Promote AI in every step of SDLC as well as in modernization and life cycle management
  • Partner with Architecture, Security, and Operations to ensure solutions meet standards and are production-ready (resilience, observability, performance, and compliance)
  • Own vendor delivery management, including performance, governance, and escalations
  • Own engineering capacity planning and allocation (skills mix, vendor blend, sourcing approach), enabling a stable cadence and reducing key-person risk
  • Establish a culture of passion for innovation and relentless improvement
  • Accountable for budget/finances of the development area and supplier commercials (where applicable)
What we offer
What we offer
  • Competitive pay, bonus & remuneration package
  • Private Health & Medical Insurance
  • Hybrid way of working
  • Unlimited connectivity with our mobile, landline and Vodafone TV services – Experience first what our customers love
  • Unlimited access to learning resources and trainings
  • Vodafone Parental Leave: 16 weeks of fully paid parental leave to all employees regardless of gender, sexual orientation or length of service
  • Remote work equipment to help you create a comfortable, ergonomic workspace at home
  • Spirit of Vodafone days: dedicated time to pause, develop new skills and connect with our teams, values and services
  • Extra days off: Vodafone Day, Family Day, Volunteering Day
  • Office amenities (subject to the office location): such as restaurant, beauty corner, gym and parking
  • Fulltime
Read More
Arrow Right