About this role
Salary: £60,000 - 60,000 per year
Requirements: Proven background in IT leadership or cyber security management.Strong capability in information security governance, frameworks and compliance.Hands on experience operating and maintaining Information Security Management Systems (ISMS).Track record of leading security audits, certifications and risk management programmes.Solid understanding of Microsoft 365 and cloud security controls.Experience overseeing third party IT providers and service delivery performance.Ability to combine strategic direction with operational execution.Excellent communication skills and confidence engaging senior stakeholders.Degree in IT, Cyber Security, Information Security or equivalent professional experience.Extensive experience in IT leadership and cyber security roles.Working knowledge of data, scripting or automation tools (e.g., SQL, PowerShell, VBA) is desirable.Experience delivering cyber security accreditations with external consultants.Background in system implementation and change management.Familiarity with Odoo, Zoho or IFS ERP systems. Responsibilities: Develop and deliver an IT and cyber security strategy aligned with business priorities and group requirements.Provide leadership across IT service delivery, infrastructure management and security governance.Maintain secure, efficient and resilient technology platforms.Advise senior executives on technology risk, investment decisions and digital transformation opportunities.Establish and maintain cyber security policies, standards and governance frameworks across both businesses, ensuring alignment with group policies.Lead and promote a company wide cyber security awareness and training programme.Monitor, assess and respond to security threats, incidents and vulnerabilities.Ensure compliance with data protection legislation and internal policies.Implement security controls, access management processes and user awareness initiatives.Coordinate regular security audits and risk assessments.Act as the accountable executive for cyber security, ensuring robust governance, risk management and compliance.Maintain effective security controls aligned with recognised industry frameworks and group requirements.Lead the implementation and ongoing maintenance of Cyber Essentials Plus.Ensure continued alignment with recognised security standards, best practice and group policies.Manage internal, customer and external cyber security audits.Coordinate evidence submission and oversee timely remediation of findings.Establish and maintain a cyber risk management framework.Conduct risk assessments across systems, users, suppliers and business processes.Lead the organisations cyber incident response capability, including investigation, remediation and continuous improvement.Ensure robust business continuity and disaster recovery capabilities for critical IT systems.Regularly test, review and enhance recovery procedures.Monitor emerging threats, regulatory developments and industry trends, communicating insights clearly to senior stakeholders.Ensure security controls evolve to address new and emerging risks.Oversee identity management, system access governance and data protection practices.Manage IT budgets across both businesses, ensuring cost effective service delivery and operational performance.Develop a technology investment roadmap.Ensure secure, value driven technology solutions.Following the implementation of Odoo/Zoho, work with senior leaders and support partners to optimise system functionality and reporting.Support the development and enhancement of the IFS ERP system in the second business.Ensure seamless and efficient integration with the website platform.Ensure reliable, effective day to day IT service delivery across both businesses.Act as the senior escalation point for critical service issues.Manage relationships with Managed Service Providers and technology vendors.Monitor performance and ensure contractual and service level compliance.Oversee the development and security of infrastructure and cloud environments.Ensure strong governance and security across Microsoft 365 platforms.Provide leadership and oversight for IT and digital transformation projects.Ensure security, resilience and compliance are embedded into all new systems and solutions. Technologies: CloudEmbeddedERPSupportMicrosoft 365OdooPowerShellSQLSecurityVBAOffice 365 More:
Our client is a large, fast moving multinational group, and this position offers the scope to define and drive the technology and cyber security strategy across two expanding business units. The successful candidate will have substantial autonomy to shape the organisations security posture, operational resilience, and digital capabilities, while working in close partnership with senior leadership. Working hours are 40 per week, Monday to Friday from 8:00am to 4:30pm, and hybrid working is offered with three days in the office and two days from home. The role also includes responsibility for technology strategy, IT operations, cyber security governance, resilience, supplier management, cloud environments, system development and digital transformation across both businesses.
last updated 38 week of 2026