CISO Full Time

Glasgow, Lanarkshire
Harvey Nash Plc

Amazing new opportunity to join our client in their newly created group CISO role! We couldn’t be more excited to be working with our new, exclusive client as they evolve their Group Technology transformation programme with the initial appointment of a key, strategic role.

The CISO will work closely with the IT Director to provide strategic information security leadership, risk awareness, appropriate governance, remediation, and assurance.

We want to hear from candidates who can operate effectively in a diverse and federated structure to deliver smart, effective solutions to information security challenges, supporting the Group in establishing a “fit for purpose” global security culture to meet current and future needs. You’ll be working on a range of exciting deliverables, including but not restricted to ISO framework best practise, working with individual stakeholders to establish risk appetite/recommend appropriate solutions and working to a senior level as the internal Security authority for our clients organisation.

• Current relevant experience at CISO/similar level.
• A proven track record of working within information security including the development, recommendation, and delivery of security risk remediation roadmaps.
• The ability to engage senior stakeholders and effectively convey both the importance and potential impacts arising from information security concerns.
• Previous experience within a fast moving, multi location private sector business.
• You will have relevant industry qualifications such as CISSP or CISM
• A solid experience of applying information security governance across internal, cloud and other third party stakeholder/system landscapes.
• The ability to spend time on site in Glasgow.
• Strong influencing and communication ability at all levels, including Director level.
• Experience in assessing emerging threats, reworking related risk remediation activities, and supporting the development of an evolving cyber security strategy.
• Ideally some exposure to OT/IIOT-related security considerations.
• Breadth of security experience across a number of key governance areas such as: vulnerability management, secure by design concepts, incident management, risk assessment, third party risk management, “acceptable use”, access management, asset management, data classification & handling, logging & monitoring, network security, physical security and remote & mobile working.

There’s lots to get involved in as you work with their external CISO Advisor initially with a view to transitioning a new CISO practice in-house, for a medium sized, fast paced private sector organisation.

Please get in touch with your CV in the first instance.