We are creating a new role of Head of Information Security. This is an opportunity for a technically strong security professional to take leadership of the information security agenda for a respected international business — setting the direction, shaping the priorities and seeing improvements through to implementation.
Reporting to the Global Head of Technology, you will be Bloomsbury’s lead subject-matter expert on information and cyber security. You will define what good security looks like for us and work with infrastructure and wider technology teams to put proportionate and practical controls in place.
Knowledge, skills and experience
You are a hands-on security professional who has developed into a senior, trusted adviser. Your background is likely to be in areas such as network, infrastructure or cloud security, security operations, identity and access management, security architecture, vulnerability management or incident response. You are equally comfortable challenging a proposed network or security configuration with an engineer and explaining a security risk and its business implications to Executives.
You are pragmatic, commercially aware and able to separate the risks that matter from those that do not. You challenge constructively, influence people who do not report to you, and remain calm and methodical when things go wrong.
- Significant experience in information or cyber security, grounded in practical technical work.
- Strong experience securing enterprise network and infrastructure environments.
- Good knowledge of cloud security, ideally within Microsoft 365 and Azure environments, with knowledge of Google Enterprise a plus.
- A strong understanding of identity, authentication, privileged access and access-control.
- Experience of vulnerability management, security monitoring and incident response.
- A track record of establishing or improving security standards, policies and controls.
- The ability to translate technical risk into pragmatic business decisions and communicate it clearly to senior, non-technical audiences.
- Experience working with recognised frameworks such as the NIST Cybersecurity Framework, CIS Controls and ISO/IEC 27001, applied as practical tools rather than ends in themselves.
- Experience in an international or multi-site organisation, or in publishing, media or another IP-rich sector, would be an advantage but is not required.
- A recognised security certification is desirable but not essential.
Personal Capabilities
- Technically credible and intellectually curious, with a genuine interest in how systems work and why they fail.
- Pragmatic; able to distinguish material risks from theoretical or low-value issues.
- Commercially aware, balancing security with cost, usability and business needs.
- Able to influence and gain commitment from teams that do not report to them.
- Comfortable challenging existing practice constructively and with evidence.
- A clear communicator with both technical and non-technical audiences, in writing and in person.
- Calm, methodical and decisive during security incidents.
- Able to work independently while collaborating closely with Technology colleagues.
Bloomsbury reserve the right to close the role early if we exceed the required number of applications
Additional information
Starting: As soon as possible
Contract: Full-time, permanent.
Hybrid-working: 2 days per week on-site
Bloomsbury Benefits
- 25 days holiday
- 3.5 days Christmas company holiday
- Two paid Personal Wellness Days
- Flexible Fridays
- Work Anywhere Fortnight
- Season Ticket Loan
- Share save Scheme
- AXA Healthcare Plan (Private Medical Insurance)
- Peppy Health App
- In-house Doctor
- Eye care Voucher Scheme
And a range of other benefits as listed on our company website: https://www.bloomsbury.com/uk/connect/work-with-us/rewarding-you/
Bloomsbury is a place where anyone of any background, race, ethnicity, religion, sexuality, gender identity, age, ability, or socio-economic status can thrive, feel comfortable, and be heard and accepted. We are an equal opportunities employer and welcome applications from all sections of the community.
We are willing to make any reasonable adjustments throughout the recruitment process, please flag to the recruitment team if required.
Applicants must have the legal right to work in the UK.
#J-18808-Ljbffr…