Full job descriptionWe’re looking for an experienced Head of Information Security to lead and strengthen a modern security function. This is a hands-on contract, working closely with the CTO and engineering teams to embed security across the product lifecycle.

Key responsibilities*Own and evolve the information security strategy.
*Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance.
*Embed secure-by-design and DevSecOps across engineering.
*Drive security improvements through AI, automation and technical controls.
*Lead security risk, threat modelling, vulnerability management and incident response.
*Oversee third-party/supplier security and operational security controls.
*Partner with SOC and engineering teams to improve detection and response.
*Support client assurance and security audits.
Experience required*CISSP, CISM or equivalent.
*Strong knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR.
*Proven leadership across information security, cyber risk or assurance.
*Strong technical understanding of cloud, application, network, endpoint and data security.
*Experience with SIEM/SOC, vulnerability management and incident response.
*Strong stakeholder management with a pragmatic, hands-on approach.