Head of Information Security

Global Head of Information Security

London (Hybrid - 2 days in office per week)

Company Description:

Our client is a global provider of energy and commodity price reporting, news, and analysis. They specialise in delivering independent price assessments, market insights, and business intelligence across a wide range of industries, including oil, gas, metals, agriculture, and chemicals. Their goal is to help businesses make informed decisions by offering data-driven reports, consulting services, and digital tools that track market trends and pricing fluctuations. Their information is widely used by traders, analysts, and industry leaders to navigate complex global markets.

What you will be doing:

• To create and manage enterprise-wide information security strategies and programme of planned compliance reviews and ensure any gaps are addressed,
• To develop and maintain the information security policy and accompanying standards, procedures and guidance
• Produce reports for the various security and compliance committees
• To promote security awareness by developing and implementing a security awareness and training programme
• To lead the investigation of information security incidents in accordance with the security incident management standard, produce reports with recommendations and ensure any remedial action is taken
• To assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Work with internal stakeholders to develop relationships to help promote and improve information security and provide security advice on architecture, procurements, projects and new initiatives as required
• Communicate information security goals and new programs effectively with other department managers.
• Maintain currency with emerging security trends, risks, new guidance or standards (internal and external) and security-enhancing technologies

Skills and Experience Required:

• A bachelor’s degree in computer science, electronic engineering, or a related field
• At least 2 years of team management, 10+ years in total cyber security experience
• A track record of successfully evolving a security-first culture in an organization with 1000+ employees
• Proven experience in delivering security in an Agile environment
• Experience of ISO27001, GDPR & HIPAA, NIST Cybersecurity Frameworks
• Holding recognized certifications: CCISO, CISM, CISSP, CEH
• Strong background in information technology with a clear understanding of the challenges of information security
• Some experience delivering security in a DevOps / DevSecOps / Rugged DevOps on AWS and hybrid environments
• Demonstrable analytical and problem-solving skills
• The ability to effectively interact with IT and Engineering teams at multiple global sites
• Strong interpersonal and communication skills to influence and collaborate with both technical and non-technical stakeholders and partners

Salary + Benefits:

• £130,000 - £140,000 Fixed plus up to 20% bonus
• Competitive salary and company bonus scheme
• Group pension scheme
• Group healthcare and life assurance scheme
• Flexible working environment
• 25 days holiday with annual increase up to 30 days
• Subsidised gym membership
• Season ticket travel loans
• Cycle to work scheme
• Extensive internal and external training