Head of Information Security.

Location: #Birmingham.
Salary: ?75,000 - ?87,500 per annum.
Employer: University of Birmingham.

Responsibilities:
• Developing and executing a strategic, enterprise-wide information security and IT risk management programme aligned with the University's goals and regulatory requirements;
• Overseeing the creation, enhancement, and enforcement of a robust information security management framework, including all related policies, standards, and procedures;
• Leading a medium-sized team of information security and cyber professionals, recognising and utilising their individual skillsets, and developing the overall team to reach its full potential;
• Collaborating with academic and professional services teams to assess and manage information security risks across the organisation;
• Defining and evolving the structure of the Information Security team, ensuring appropriate staffing and capabilities to meet current and future needs;
• Acting as the University’s authoritative representative on information and cyber security matters, engaging with external partners, networks, and regulatory bodies;
• Partnering with stakeholders across the University to raise awareness of information security risks and promoting a culture of shared responsibility;
• Overseeing the ongoing implementation of security tools and working with technical cyber security staff to maximise the effectiveness of existing tooling;
• Working closely with vendors to interpret and manage complex licensing terms, ensuring compliance and maximising the utilisation of existing security tools;
• Demonstrating a mature and compliant approach to information governance and security, in alignment with public-sector specific requirements.

Requirements:
• Senior-level experience in security leadership built upon a progressive trajectory in IT Security roles, with a proven track record of defining strategic security initiatives and serving as a trusted subject matter expert;
• Extensive experience in leading information security strategy and governance, including the creation, implementation, and enforcement of security policies, monitoring frameworks, and compliance structures within large organisations;
• Whilst certainly not essential, a higher education or public sector background would be ideal;
• Strong strategic thinking and planning capabilities, with the ability to articulate and drive a clear vision for information security across the university;
• Demonstrable expertise in implementing and maintaining formal compliance or certification programmes, such as ISO27001, NIST, COBIT or Cyber Essentials;
• Experience in assessing, managing, and quantifying information security risks, including the development of metrics and tracking mechanisms;
• Experience working with senior stakeholders, earning trust and influencing decision-making at executive levels;
• Excellent communication and presentation skills, with the ability to articulate complex security concepts to non-technical audiences.

Apply.

#Офис #ИБ