Lead Information Security Officer

Company: University College London
Apply for the Lead Information Security Officer
Location: London
Job Description:

Overview

Envisioned as a senior security lead, you will shape UCL’s information security awareness, culture and training across a large, complex organisation. You will design and deliver awareness campaigns and targeted interventions, collaborating with stakeholders to address risk and embed secure practices in daily work. You will provide senior leadership to continuously improve security culture and contribute to the broader information security strategy. This role offers the opportunity to drive meaningful change in how staff and students engage with security across the university.

Pay / Benefits

  • 41 Days holiday
  • CARE pension scheme
  • Cycle to work scheme
  • On-Site nursery
  • On-site gym
  • Employee assistance programme

Responsibilities

  • Lead development and delivery of information security awareness campaigns, training and engagement activities
  • Collaborate with stakeholders across UCL to identify risk areas and design targeted interventions
  • Provide senior leadership and governance via measures of effectiveness to improve security culture
  • Contribute to the wider information security strategy and governance initiatives
  • Translate complex security concepts into clear, practical messaging for diverse audiences

Key requirements

  • Significant experience in information or cyber security
  • Experience leading security awareness, culture, training or related initiatives
  • Strong knowledge of information security risks, controls and good practice
  • Ability to translate complex concepts into clear, practical messages
  • Experience delivering organisation-wide awareness campaigns and guidance
  • Experience influencing behaviour and building a positive security culture
  • Strong stakeholder management and communication with senior leaders and non-technical audiences
  • Experience measuring effectiveness of awareness and training activities
  • Stakeholder management
  • Influencing skills
  • Clear communication
  • Information security knowledge
  • Awareness program design and evaluation
  • Behavioural change and training analytics

…

Posted: November 13th, 2026