Chief Information Security Officer

Chief Information Security Officer (CISO)London Full-TimeWe are working with a highly innovative financial services organisation to appoint a Chief Information Security Officer (CISO) to lead its global information and cyber security strategy.This is a senior leadership opportunity for an experienced security executive to take ownership of the organisation’s security framework, cyber resilience and information security programme, working closely with executive management, technology leadership, risk and regulatory stakeholders.The successful candidate will be responsible for defining and delivering the firm’s security strategy, ensuring the organisation remains resilient against an evolving threat landscape while supporting continued business growth and technological development.Key ResponsibilitiesDefine and lead the organisation’s global information and cyber security strategy.Act as the senior authority for information security, cyber risk and resilience across the business.Develop and maintain an effective security governance framework, policies and controls.Provide strategic security advice to executive leadership and senior stakeholders.Oversee cyber risk assessments, security monitoring, incident management and threat response.Ensure appropriate security controls are embedded across infrastructure, applications, cloud environments and technology platforms.Lead security architecture, vulnerability management, penetration testing and third-party security oversight.Maintain and enhance incident response, business resilience and cyber recovery capabilities.Work closely with Risk, Compliance, Technology and other control functions to manage information security risk.Support regulatory engagements, audits and security assurance activities.Ensure security standards remain aligned with relevant regulatory requirements and industry frameworks.Build a strong security culture across the organisation through awareness, governance and effective stakeholder engagement.Lead and develop internal security capability and manage specialist external security partners where required.Candidate ProfileSignificant experience operating in a senior information security or cyber security leadership position.Strong experience within financial services, banking, capital markets, fintech or another highly regulated environment.Proven experience developing and executing enterprise-level cyber and information security strategies.Strong understanding of cyber risk management, security governance and operational resilience.Broad technical understanding across cloud security, infrastructure security, application security, identity and access management, vulnerability management and security operations.Experience managing major security incidents and developing effective incident response frameworks.Strong understanding of regulatory expectations relating to cyber security, information security and technology risk.Experience engaging with executive committees, boards, regulators and other senior stakeholders.Commercial and pragmatic approach, with the ability to balance security requirements against business objectives.Excellent leadership, communication and stakeholder management skills.Relevant professional qualifications such as CISSP, CISM, CRISC or equivalent would be advantageous.This is an opportunity to take ownership of the security function within a sophisticated, technology-led financial services organisation and play a key role in shaping its future security and resilience strategy.