Job Description

Head of Information Security & Assurance

Northern England | Hybrid Working | £50,000 – £55,000

We are supporting a regional public sector organisation seeking an experienced Head of Information Security & Assurance to lead the development and delivery of cyber and information security strategy across a complex, highly regulated environment.

This is a key leadership role, responsible for shaping organisational approaches to information security, cyber resilience, governance and assurance, ensuring security considerations are embedded into both operational and strategic decision-making.

Working closely with senior leadership, technology teams and wider organisational stakeholders, you will lead on the protection of critical information assets, balancing risk, operational priorities and organisational objectives.

Key responsibilities are likely to include:

• Leading the organisation’s cyber and information security strategy, policies and assurance activities
• Developing and embedding security controls, governance frameworks and risk management approaches
• Providing strategic security advice to senior stakeholders and leadership teams
• Leading proactive threat, vulnerability and risk management activities
• Overseeing cyber incident response planning and organisational resilience arrangements
• Driving a security-by-design approach across technology, transformation and procurement activity
• Supporting compliance with relevant legislation, standards and regulatory requirements
• Building strong relationships with internal and external stakeholders to continuously improve security capability
• Leading, coaching and developing a specialist security function

We are keen to hear from individuals with:

• Significant experience in information security leadership, governance or assurance roles
• Experience operating within complex, highly regulated environments
• Strong knowledge of cyber security, information assurance, risk and compliance frameworks
• Experience translating technical risk into clear business language for senior stakeholders
• Relevant professional certifications such as CISSP, CISM or equivalent

This role would suit a collaborative and pragmatic security leader who enjoys balancing strategic direction with operational delivery and stakeholder engagement.

Location: Northern England | Hybrid Working
Salary: £50,000 – £55,000

If you would like to discuss the opportunity further, please contact Data Careers for an informal conversation.