Overview
The Fractional Chief Information Security Officer (CISO) will provide strategic cybersecurity leadership for a major digital transformation initiative within the education sector. This role involves collaborating with internal IT teams, executive stakeholders, and external suppliers to assess current security practices, develop and implement security strategies, and ensure alignment with organizational objectives and regulatory standards. The successful candidate will work part-time, delivering security governance and risk management oversight to enhance the institution's cybersecurity posture.
Responsibilities
- Assess current information security posture and develop security strategy.
- Advise senior leadership on cyber risk and compliance with industry standards.
- Oversee information security governance, risk management, and incident response.
- Establish reporting and performance measures for security improvements.
- Manage third-party risks and ensure data protection across the organization.
- Communicate technical risks and security policies to non-technical stakeholders.
- Provide regular updates to leadership on risk controls and remediation efforts.
Requirements
- Demonstrable experience in a CISO or senior information security leadership role.
- Experience in developing and implementing security strategies and risk management frameworks.
- Knowledge of ISO 27001, UK GDPR, and the Data Protection Act 2018.
- Understanding of the education sector's operating environment and data protection requirements.
- Ability to communicate technical information to non-technical audiences.
- Proven track record of delivering measurable security improvements on a fractional basis.