Lead security for the Group
Own the cybersecurity framework
Continuously improve strategy, policies, risk register, and controls
Run the cyber risk-management lifecycle
Maintain the asset inventory, run risk assessments
Notify our regulator when required
Maintain baseline security-configuration and access-control standards
Own vendor and outsourcing security due diligence
Run a group-wide security awareness programme
Help the Board approve the security audit plan
Act as the primary point of contact for the Board and all internal functions on cyber risk
Own and operate our SIEM
Run security monitoring
Own containment, eradication, and recovery for security incidents
Run vulnerability management
Track relevant feeds and maintain indicators of compromise
Hold or delegate coverage outside business hours

Ideally 5+ years in information security or similar roles
A genuine mix of hands-on SOC / detection-engineering work and governance or senior-management-level accountability
A track record owning a cybersecurity framework in a regulated environment
Real, practical experience owning a SIEM and leading incident response
Comfortable being a named, accountable CISO to a regulator
Clean regulatory and criminal record with probity checks covering criminal history
Experiences in security roles ideally in regulated environments must be demonstrable.

VP Information Security

Key skills