This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We are looking for a senior IT security leader to define, implement and assure our information and cyber security posture across the firm. This is a new leadership role with broad responsibility for security strategy, standards, controls and services, operating at a level aligned to CISO capability. You will lead a proactive, risk-based approach to security, ensuring it is embedded into technology design, delivery and operations. Working closely with Governance & Risk, Architecture & Data, Platforms and Operations, you will help protect the firm against evolving threats while enabling secure innovation and service delivery.
Job Responsibility
Define and implement security strategy, standards and controls aligned to ISO27001, Cyber Essentials Plus and the firm’s wider data, AI and innovation strategies
Oversee security operations, monitoring, detection and response across areas such as SOC, SIEM, XDR, vulnerability management and incident response
Embed security by design into projects, change and solution architecture, including identity, endpoint, cloud, network, email and secure remote access controls
Work with Governance & Risk to maintain and improve the ISMS, support audits and ensure regulatory and client expectations are met
Provide clear reporting on security posture, risks, incidents and improvement plans to technical and non-technical stakeholders
Promote a strong security culture through awareness, training and practical guidance on secure behaviours
Requirements
Senior IT security leadership experience, ideally with exposure to CISO-level responsibilities
Strong knowledge of security operations, identity and access management, cloud and network security, endpoint protection, email security and modern models such as Zero Trust / ZTNA
Experience working with ISO27001, Cyber Essentials Plus and recognised security frameworks such as CIS Controls or NIST
The ability to translate risk and compliance requirements into practical controls, services and improvement plans
Experience managing teams, vendors and managed security services, ideally in a SaaS-focused professional services environment
Clear communication skills, with the confidence to explain complex security topics to senior stakeholders, technical teams and external parties
A pragmatic, outcome-focused and forward-looking approach, with the resilience to work effectively under pressure
What we offer
Inclusive employer
reasonable adjustments to application and interview process