Head of Information Security Job at TRIA (Milton Keynes or London)

Head of Cyber Security Culture and Architecture

Grade 6 vacancy in the Information and Cyber Security Department. Responsible fo...

Location

United Kingdom , Hanslope Park (Milton Keynes) or East Kilbride

Salary:

69500.00 - 90600.00 GBP / Year

Allen Lane

Expiration Date

Until further notice

Requirements

Enterprise Security Architecture: Leading the design and assurance of enterprise security architecture, applying recognised frameworks and principles
Technical Security Architecture: Applying security architectural principles to complex IT and operational technology (OT) systems
Policy and Standards: Providing subject matter expertise in developing and interpreting cyber and information security policies and standards
Information Security Culture: Baselining the future vision for the FCDO’s information and cyber security culture, defining and assuring delivery of change levers
Third Party Management: Leading the definition and assurance of cyber and information security requirements for third-party relationships
Management, Leadership and Influence: Embedding a security first culture and influencing behaviours at all levels
Must hold or be willing to obtain security clearance to DV level
Must have been resident in the UK for five out of the last ten years immediately prior to application

Job Responsibility

Define, lead and deliver, through their team, the FCDO’s secure architecture and its internal cyber security culture
Ensure secure design is embedded across systems and services while fostering a workforce that understands, values and upholds security principles
Lead a team of security architects who will influence technology delivery, organisational behaviours and leadership decision making
Ensure architecture, awareness and cultural resilience are delivered in a coordinated way
Work in partnership with business, digital and security stakeholders
Lead engagement and reporting for their workstreams
Represent the CISO at various HMG and external events where necessary

What we offer

Civil Service pension scheme (employer contribution of 28.97%)
Annual leave starting at 25 days leave per annum
Location allowance of £1,750 (if based in Milton Keynes)
Specialist allowance of up to £10,800 per annum (subject to review)

Fulltime

Information Security Senior Analyst

The Info Sec Prof Senior Analyst is an intermediate-level position responsible f...

Location

Singapore , Singapore

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

5-8 years of relevant experience
applicable certifications or willingness to earn within 12 months of joining
consistently demonstrates clear and concise written and verbal communication
proven influencing and relationship management skills
proven analytical skills
ICND 1 Certification or equivalent knowledge in Networking
excellent Microsoft Excel skills
basic network infrastructure knowledge
ability to work with Big Data
exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary

Job Responsibility

Identify potential information security (IS) risks and make recommendations for enhancement
collect and analyze security risk evidence and coordinate with internal and external compliance and auditing agencies / officials
execute meetings and communicate complex security topics and safe IS practices with all levels of the organization
ensure that controls are utilized daily and that non-compliance remediation is addressed
provide IS consulting services, including interpreting and/or clarifying information security policy, procedures, standards or concepts
assist with defining and implementing IS standards to align procedures and practices in compliance with Citi standards
educate and advise on safe information security practices and current, changing, and/or recommended information security requirements
validate compliance with IS policies, practices, and procedures, and resolve a variety of IS related issues in coordination with the business
support the Annual Connectivity Verification process
validate legacy connectivity for ownership, registration, and usage

Fulltime

Security Strategy and Risk Management Head of Department

The Security Strategy and Risk Management Head of Department is a senior leaders...

Location

United States , Irvine

Salary:

181240.00 - 259160.00 USD / Year

Hyundai AutoEver America

Expiration Date

Until further notice

Requirements

15–20 years of progressive experience across Information Security, GRC/Risk Management, customer/vendor security management and/or strategic operations
Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, Business Administration or a related discipline
Excellent stakeholder management, communication, and leadership skills
Demonstrated experience working across multi-disciplinary teams to achieve common objectives
Proficient in English for effective communication and coordination

Job Responsibility

Lead enterprise-wide risk assessment, risk issue management, and risk exception management
Maintain and enhance risk management frameworks aligned with industry best practices
Deliver insightful, data-driven risk reporting to senior leadership
Oversee the Information Security compliance and control assurance program
Lead coordination of internal and external audits, assessments, and certification processes
Lead the Third-Party Risk Management (TPRM) program
Oversee creation, governance, maintenance, and communication of Information Security policies, standards, and procedures
Direct the Information Security Training and Awareness program
Partner with the CISO to define and maintain the Information Security strategic roadmap
Lead budget planning, forecasting, tracking, and optimization for the full Information Security organization

Fulltime

Head of Engineering - Information Protection

We are seeking an inspiring and strategic Engineering Leader to join our Informa...

Location

India

Salary:

Not provided

Atlassian

Expiration Date

Until further notice

Requirements

12+ years of experience in building and scaling engineering teams with a focus on engineering strategy, infrastructure planning, and architecture
Demonstrated experience in developing influential relationships and trust with senior leaders across different functions
Proven experience hiring and mentoring high-caliber engineers with diverse technical strengths and backgrounds
Strong product sense with an understanding of product drivers and of how to drive value across customers
Exceptional communication skills, with the ability to translate technical concepts into easy-to-understand language for business partners
High-energy self-starter with a passion for data and enjoy working in a fast-paced environment
You will have strong empathy and a bias for action
A graduate degree in Computer Science or a related technical field

Job Responsibility

Lead and manage multiple engineering teams within our India based engineering organization, focused on building and scaling Information protection applications, delivering on ambitious multi-quarter roadmaps
Define and execute technical and product strategies aligned with Atlassian’s vision for enterprise security, data protection, and compliance
Foster an inclusive environment where diverse perspectives are welcomed and innovation is encouraged
Collaborate closely with product management, design, and global engineering leaders to deliver high-impact features and seamless customer experiences
Drive technical excellence, operational rigor, and continuous improvement across teams
Recruit, mentor, and develop top engineering talent
build strong succession pipelines and support career growth
Champion developer productivity, quality, and operational metrics
Partner with local and global leaders to strengthen Atlassian’s brand, talent acquisition, and retention in India

What we offer

Health and wellbeing resources
Paid volunteer days

Head of Information Technology (Digital Workplace)

Digital Workplace's mission is to enable PPRO colleagues to do their best work b...

Location

Germany , Munich

Salary:

Not provided

PPRO GmbH

Expiration Date

Until further notice

Requirements

Track record of designing and implementing an integrated digital workplace experience in a technology leadership role with both project and operational responsibilities
Experience in bringing product and software engineering best practices to the digital workplace (problem understanding, solution and system design, platform as code, etc.)
Experience in implementing and maintaining robust security controls in a user-friendly way, ensuring compliance and security awareness without hindering productivity
Strong collaboration skills to work with business leaders on all levels to understand requirements and translate them into technical capabilities
Excellent written and verbal communication skills
Experience leading globally distributed team members
Efficient budget management by making informed investment decisions that are aligned with the overall business budget and objectives

Job Responsibility

Work with stakeholders and the team to design the target digital workplace experience to maximise colleague productivity
Define the strategy to achieve the target experience, quantify success and clearly articulate areas for investment
Establish operational and project cycles within the team to deliver strategic results and support our colleagues around the world
Driving the technology culture to simplify and automate routine tasks and increase productivity
Work with external vendors and partners to enhance our colleague offering and ensure a seamless experience
Take ownership of security and compliance within the team and beyond, enabling colleagues to do their jobs efficiently and safely

What we offer

Hybrid working with a 3 days / week on site expectation
30-day holiday allowance
Work from abroad policy, enabling employees to work remotely for up to another 30 days per year
€1,000 annual learning and development budget
Leadership cafés, on-the-job training
Accident insurance, disability insurance, direct insurance (bAV) and travel insurance
Enhanced family leave
Gym membership contribution
Mental Health Platform access
Pet-friendly office

Fulltime

Specialist – Governance, Risk & Control

To manage and lead the Technology Security Governance, Risk, Compliance and Assu...

Location

Lesotho

Salary:

Not provided

Vodafone

Expiration Date

Until further notice

Requirements

Degree or equivalent in IT/Engineering or relevant tertiary qualification
Knowledge of legal, regulatory and privacy requirements, such as Personally Identifiable Information (PII), GDPR, etc.
Proven experience managing and operating multiple security programs, projects, and initiatives
Ability to write reports for different security stakeholders
Proficient in preparation of reports, dashboards and documentation
Knowledge of and experience with GDPR
Web Application security and best practises
Business Analysis skills
High competence in Programming skills
Risk assessment skills

Job Responsibility

Direct, develop, implement and maintain a comprehensive Vodacom-wide information security governance, risk and compliance strategy
Ensure security is embedded in IT System and Network Infrastructure (Mobile, IS and Enterprise) across the Vodacom
Ensure timely delivery of technology security assurance and support for projects
Provide accurate and timely reporting of technology security risks identified during project engagement and propose remediation and mitigation options
Monitor information security governance, risk, and compliance by Vodacom BIT, Mobile and Enterprise Business domains
Ensure alignment of information security governance with the Vodacom’s business objectives, the information security strategy, plans and controls
Ensure compliance with the applicable legislative and regulatory interpretation and corporate risk appetite
With the assistance of Head: Technology Governance, Lead, develop, manage and maintain the Vodacom-wide information security governance deliverables lifecycle including compliance measurement, deviations and exemptions
Engage with the stakeholders on compliance to control effectiveness and deficiencies in the design and operating effectiveness of information security controls, design and recommend opportunities for continuous improvement
Develop, manage and implement the Vodacom information security audit and assurance plans and schedules, including any specific business needs and requirements (including PCI, ISO27001, GDPR, Data Protection Act of Lesotho, Cyber Crime Bill)

New

Global Head of Cyber Risk and Compliance

The Technology & Cyber Compliance and Operational Risk Office (TCCORO) at Citi i...

Location

United States , Irving, Texas, United States, New York, New York, United States

Salary:

250000.00 - 500000.00 USD / Year

Citi

Expiration Date

Until further notice

Requirements

20+ years' experience in technology risk and/or cyber risk management in the banking/financial services industry, or related field, with at least 5+ years in 2nd or 3rd line senior leadership positions
Subject matter expert in technology risk and/or cyber risk management principles and practices across various information system architecture and engineering domains
Proven experience in managing complex risk portfolios and developing strategic risk management frameworks for large organizations
Robust understanding of operational risk management frameworks, industry standards, regulatory requirements, and risk mitigation practices
Experience managing and overseeing large remediation and transformation programs to achieve intended results
Extensive experience in effective written and verbal communication with executive audiences including Boards
Experienced risk challenger who balances risks vs. rewards aligned with corporate risk culture
Understanding of Citi products and services and downstream impacts of technology risk and/or cyber risk strategy
Professional certifications in either technology risk and/or cyber risk preferred, including: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), ERM, CET, ISO27001, COBIT, TOGAF, or CRI
In-depth, working knowledge of banking technologies, fraud, cybercrime detection and countermeasures, encryption, data retention, as well as information security support for segregation of duties, application development, network and systems operation, testing and vendor management

Job Responsibility

Oversight and challenge of the cybersecurity incident response programs
Oversight of the security operations center (SOC) and cybersecurity fusion center (CSFC)
Oversight of cybersecurity penetration testing and red-team operations
Oversight of the Chief Information Security Office (CISO), including the review of the effectiveness of the controls, standards and programs across the enterprise
Implementation of guidance for overseeing Emerging Technology and Operational Risks, in compliance with OCC Heightened Standards
Able to present and lead discussions with key Regulators, internal and external auditors, as well the Board of Directors and the Risk and Audit sub-committees
Governance and Oversight of security risks impacting the business and technology
Support in the development of Cyber Policy and Standards
Oversight of Key Operational Risks and related indicators and thresholds
Challenge of Cyber Risk Self Assessments

What we offer

Discretionary and formulaic incentive and retention awards
medical, dental & vision coverage
401(k)
life, accident, and disability insurance
wellness programs
paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

Fulltime

Information Security Officer

The Information Security Officer will be responsible for the development, implem...

Location

France , Tassin-la-Demi-Lune

Salary:

Not provided

LumApps

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field
5+ years of experience in information security, risk management, or IT auditing
Deep understanding of network security, cloud security (GCP/Azure), IAM (Identity and Access Management)
Ability to translate complex technical risks into "business language" for executive leadership
A calm, analytical approach to high-pressure crisis situations
Absolute commitment to ethics and confidentiality

Job Responsibility

Develop and maintain an enterprise-wide information security strategy and roadmap
Create, document, and enforce security policies, standards, and procedures (e.g., Access Control, Data Encryption, Incident Response)
Lead regular risk assessments and vulnerability audits
coordinate with department heads to mitigate identified risks
Ensure the organization meets regulatory requirements such as SOC2 and ISO 27001
Design and oversee security training programs for all employees to reduce human-factor risks like phishing
Evaluate the security posture of third-party vendors and supply chain partners
Customers main point of contact for security requests

What we offer

Hybrid work model – 2 days at the office, 3 days remote
RTT days – ~10 extra days off per year
Meal vouchers (SWILE) + free snacks & coffee
Yoga classes – Take a mindful break in our Paris office
Supportive parental leave and family moments — yes, even a Christmas party for your kids !
Health insurance (ALAN) – 60% covered + full life & disability cover
Afterworks, team celebrations & seasonal parties
Equipment
French & English lessons, professional development & access to Leeto CSE

Fulltime

Select Country

Head of Information Security

TRIA

Location:
United Kingdom , Milton Keynes or London

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
February 13, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Head of Information Security