Cyber and Information Security Lead

We are looking for an individual with extensive security leadership experience, specifically over 10 years in a senior information security role, ideally at the CISO level or equivalent within a software development or health technology environment. You should possess in-depth knowledge and practical experience with UK healthcare security standards and regulations, including expertise in the NHS Data Security and Protection Toolkit (DSPT), Digital Technology Assessment Criteria (DTAC), and NCSC CAF. Hands-on experience with the implementation, certification, and maintenance of an ISO 27001 Information Security Management System (ISMS) is essential, particularly the 2022 standard. A strong understanding of secure software development lifecycles (SDLC) and the ability to embed security by design into product development processes is critical. Your background should also include expertise in developing and managing information security risk management frameworks and a proven track record in incident response, including major incident handling and communication with regulatory bodies. Moreover, you should have experience in developing comprehensive information security policies, a solid understanding of UK and EU data protection laws, and excellent stakeholder management skills to effectively communicate complex security concepts to both technical and non-technical individuals. Finally, proven leadership abilities, particularly in mentoring a governance, risk, and compliance (GRC) team, and experience with vulnerability management are significant assets.