Head of Information Security

Overview

As Head of Information Security at Ordnance Survey, you will lead and continuously improve our security capability, ensuring controls, services and risk management align with organisational priorities. You’ll shape security strategy and translate it into effective capabilities, working across technology, product and operations. The role combines strategic thinking with practical delivery to protect critical services and enable trusted digital innovation. This is a senior, cross-functional leadership role with a clear impact on risk, resilience and stakeholder confidence.

Pay / Benefits

• Competitive salary and pension
• Performance-related bonus
• 28 days annual leave plus bank holidays
• Enhanced family leave including paid partner leave
• Hybrid and flexible working options
• Learning and development support, coaching and mentoring

Responsibilities

• Lead day-to-day operation, delivery and continual improvement of the Information Security capability
• Contribute to development and delivery of Security Strategy and roadmap
• Develop and govern information security services, operating models and controls
• Provide expert security advice, assurance and guidance in business change, projects and technology delivery
• Lead incident response and manage emerging threats and vulnerabilities
• Oversee information security risk management in line with governance and risk appetite
• Develop security reporting, metrics and insights to support decision-making
• Continuously review and improve security capabilities to align with priorities and industry best practice
• Build strong partnerships across OS and with external stakeholders to strengthen security outcomes

Key requirements

• Significant experience leading information security, cyber security or security operations functions
• Strong understanding of information security risk management, assurance, threat and vulnerability management
• Knowledge of recognised security frameworks, standards and maturity models
• Experience developing capabilities and operating models through structured maturity and continuous improvement
• Ability to influence senior leaders and translate complex security challenges into practical outcomes
• Experience using data and insights to support decision-making and performance improvement
• Experience building relationships with government organisations, regulators or external security communities
• Collaborative leadership style that develops capability and enables others to succeed

• Collaborative leadership
• Influencing senior stakeholders
• Cross-functional collaboration
• Security frameworks, standards, and maturity models
• Information security risk management
• Threat management and vulnerability management

…