Chief Information Security Officer

Overview

As Account Security Director (vCISO) you will lead security governance, assurance and strategic oversight for a major client account. You’ll act as the primary security interface between the client, account leadership and service delivery, ensuring security is embedded across the service lifecycle. You provide trusted, executive-level guidance to align security with business objectives, contracts and risk appetite, while driving resilience and continual improvement. This role combines strategic advisory, architecture oversight and strong stakeholder engagement to shape security outcomes for the account.

Pay / Benefits

• flexible work options
• tailored benefits
• learning and development opportunities
• employer commitment to diversity and inclusion

Responsibilities

• Act as the senior security representative for the account and build trusted client relationships across security, technology, risk and compliance
• Provide strategic security guidance to client executives and delivery teams and participate in governance and transformation forums
• Escalate significant security issues and facilitate clear communication among business, operational and technical stakeholders
• Own and continually improve the Account Security Management Plan and governance/reporting frameworks
• Oversee security posture, controls, risk remediation and assurance activities, including audits and evidence of compliance
• Provide security architecture oversight, ensure security-by-design in solutions, and align architecture decisions with risk and resilience requirements
• Support transformation programs with strategic security guidance and integrate security considerations into roadmaps
• Maintain awareness of threats and emerging technologies to keep security architecture effective and proportionate
• Drive a proactive security culture across the account and promote continual improvement within the delivery organization
• Ensure regulatory, contractual and policy obligations are reflected in governance and delivery activities
• Provide independent security challenge to optimize risk, resilience and compliance outcomes
• Support internal and external audits and assurance activities and translate incidents/audits into improvement actions

Key requirements

• Minimum 7 years in a senior information security leadership, Security Director, CISO or vCISO role
• Proven strategic leadership experience in large, regulated organisations
• Experience advising executive leadership and senior stakeholders on security matters
• Experience building security governance, risk management and assurance programmes
• Experience owning Security Management Plans and governance/reporting frameworks
• Experience leading security assurance activities and remediation efforts
• Strong enterprise security architecture experience including security-by-design principles
• Experience reviewing technology, cloud, infrastructure and transformation initiatives from risk/resilience perspectives
• Experience operating in outsourced/multi-supplier delivery environments
• Ability to influence senior stakeholders without direct management authority
• CISSP, CISM, CRISC, CCISO or equivalent; UK Cyber Security Council Professional or equivalent; ongoing professional development

• Excellent stakeholder management
• Negotiation and communication
• Influencing skills
• Security governance, risk management and assurance
• Enterprise security architecture and security-by-design
• Regulatory compliance and third-party risk management

…