Overview
This role involves leading the information security efforts of a dynamic software organization during a critical growth phase. The Director of Information Security will work collaboratively with senior leadership to formulate and implement a comprehensive security strategy, ensuring compliance and risk management while driving technical security initiatives across various operations. The position balances strategic oversight with hands-on execution, engaging both with executive stakeholders and technical teams.
Responsibilities
- Define and deliver the organisation's information security strategy and roadmap.
- Partner with business leaders to ensure security supports growth and operational objectives.
- Develop and maintain a robust security framework incorporating industry best practices.
- Drive organisation-wide security awareness and training initiatives.
- Lead identity and access management and endpoint security programmes.
- Oversee application security, vulnerability management, and secure software development practices.
- Establish and enhance incident response processes and communication plans.
- Manage third-party supplier security assessments and vendor risk programmes.
Requirements
- Proven experience in a senior Information Security leadership role, preferably at Director or CISO level.
- Strong understanding of security governance, risk management, compliance, and operational security.
- Experience leading security programmes within software or technology organisations.
- Expertise in application security, infrastructure security, and cloud security.
- Familiarity with frameworks such as ISO 27001, Cyber Essentials Plus, or NIST CSF.
- Knowledge of vulnerability management, incident response, and vendor risk management.
- Experience engaging with executive leadership on security matters.
- Security certifications such as CISSP, CISM, CRISC, or equivalent are desirable.