Head of Information Security Job at River Island (West London)

Head of Information Security

River Island

Location:
United Kingdom , West London

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

As River Island’s Head of Information Security, you’ll play a strategic and hands-on leadership role in shaping and strengthening our security posture across the business. Reporting to the CIO and working as part of the Technology Leadership Team, you’ll define, embed, and continuously improve River Island’s information security framework — ensuring we remain compliant, resilient, and trusted by our customers, partners, and people. This is a highly visible role, blending strategy and delivery. You’ll oversee security operations, vulnerability management, compliance, and risk governance, while partnering with Technology, Data, Legal, and wider business teams to ensure security is embedded into everything we do — from store systems to eCommerce and cloud platforms.

Job Responsibility:

Define, implement, and evolve River Island’s information security strategy in line with business objectives, regulatory obligations, and risk appetite
Lead the development and maintenance of Information Security policies, standards, and controls, ensuring alignment with frameworks such as ISO 27001, NIST CSF, and the SANS Top 18
Define and report security KPIs/KRIs to senior management to senior leadership representing risk posture, compliance status, and strategic improvement initiatives
Own and manage the Information Security Risk Register
ensure risks are assessed, documented, and mitigated effectively
Lead compliance efforts across GDPR, PCI DSS, and other applicable regulations
Conduct and coordinate enterprise-wide risk assessments, audits, and internal reviews
Champion a pragmatic, risk-based approach to security — balancing protection, productivity, and customer experience
Own and govern IAM standards (RBAC, joiner/mover/leaver, privileged access, MFA, SSO) across corporate, store and customer-facing platforms
Oversee operational security activities, including threat detection, vulnerability management, and incident response
Coordinate penetration testing, red-teaming, and vulnerability remediation across applications, infrastructure, and cloud environments
Develop and maintain incident response playbooks and lead investigations where required
Partner with our Managed SOC and technology teams to strengthen detection, response, and automation capabilities
Embed secure-by-design principles and DevSecOps practices across engineering and delivery teams
Partner with Legal and the DPO on DPIAs, data transfer assessments and privacy-by-design
Provide specialist input into solution design, architecture reviews, and third-party integrations
Support major transformation projects, ensuring security controls and data protection measures are built in from the start
Oversee third-party risk management, including supplier due diligence, onboarding, and continuous monitoring
Support client assurance and audit activities, providing evidence of River Island’s security posture
Maintain trust and transparency in all information security communications internally and externally
Drive ongoing maturity of the security function through measurable improvement plans, tooling optimisation, and process automation
Lead awareness initiatives and promote a strong security culture across the business
Mentor and develop members of the Information Security team

Requirements:

Proven experience in a senior information security role, ideally within a complex, multi-channel retail or technology environment
Strong technical grounding across key security domains: network, cloud, endpoint, application, and data security
Experience managing or working with vulnerability management tools, SIEM/SOC environments, and incident response processes
Familiarity with frameworks and standards such as ISO 27001, NIST, CIS, PCI DSS, and GDPR
Excellent communication and stakeholder management skills, with the ability to influence at all levels of the organisation
Analytical, pragmatic, and calm under pressure — with a focus on enabling the business, not blocking it

Nice to have:

Security certifications such as CISSP, CISM, or equivalent
Experience in retail, eCommerce, or cloud transformation programs
Understanding of emerging technologies (AI, machine learning, cloud-native architectures) and associated security considerations

What we offer:

Generous 50% staff discount so you can treat yourself to the latest products, and a bargain staff shop on site
Reducing Islanders everyday expenses through discounts, benefits, financial advice, wellbeing solutions and more through Reward Gateway
A free onsite gym, subsidised restaurant & café to fill you needs
Various social events to socialise throughout the year
Every family is unique, we support Islanders with all different family setups enhanced maternity, paternity, adoption & fertility treatment
We also work closely with the Retail Trust to create dedicated support for all our Islanders
Flexible working is a given, on top of payday and summer early finish Fridays
Give as you earn scheme, a ‘Giver Island’ day each year and receive matched funding
Support with upskilling through on the job training and qualifications
A succession plan if you want to progress
A generous bonus scheme & private pension plan
The choice to opt in for healthcare through our provider AXA
An allowance supporting your commute to work
25 days paid holiday, exclusive of Bank Holidays
With the added option to purchase additional holiday twice a year for whatever the need

Additional Information:

Job Posted:
February 01, 2026

Employment Type:

Fulltime

Work Type:

Hybrid work

River Island - All Job Offers

Job Link Share:

Head of Information Security

River Island

Location:
United Kingdom , West London

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
February 01, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Head of Information Security

Head of Cyber Security Culture and Architecture

Information Security Senior Analyst

Security Strategy and Risk Management Head of Department

Head of Engineering - Information Protection

Head of Information Technology (Digital Workplace)

Head of Product Development (Workforce)

Enterprise Security Engineer

Information Security Analyst

Head of Information Security

River Island

Location:United Kingdom , West London

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:February 01, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Head of Information Security

Head of Cyber Security Culture and Architecture

Information Security Senior Analyst

Security Strategy and Risk Management Head of Department

Head of Engineering - Information Protection

Head of Information Technology (Digital Workplace)

Head of Product Development (Workforce)

Enterprise Security Engineer

Information Security Analyst

Location:
United Kingdom , West London

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
February 01, 2026