CISO |12 months | Hybrid, London or Manchester | Inside IR35

Jumar Solutions Ltd
CISO
12 Months
Up to £1,100 P/D Inside IR35
Hybrid, 2 days on site per week (London or Manchester)

Jumar are seeking a talented and experienced Cyber Security Lead to join our govenment client and take ownership of their cyber security strategy.

Responsibilities:

• Shape the Cyber Security Strategy: Take the lead in defining and implementing our cyber security strategy, ensuring it aligns with industry best practices and standards. You will be responsible for fully forming our risk and governance processes, providing a robust framework for security operations.
• Enhance Security Processes: Oversee the development and improvement of threat identification, vulnerability management, protective and transactional monitoring, incident response processes, and cyber risk management. Ensure these processes are fit for purpose, promoting Security by Design principles across our portfolio of programs.
• Lead a Community of Security Experts: Foster a collaborative environment by leading and advocating for our community of security experts. Prioritize security backlog items and ensure their efficient resolution.
• Stakeholder Management: Establish and maintain effective relationships with internal and external stakeholders and partners. Collaborate closely with other executives, business units, and stakeholders to align security policies and procedures with our business objectives.
• Government Agency Collaboration: Maintain productive relationships with relevant government agencies, such as the NCSC. Anticipate emerging threats to our organization and leverage insights to enhance our security posture.
• Stay Current with Security Trends: Keep yourself and stakeholders informed about the latest security trends, technologies, and regulatory requirements. Apply this knowledge to continuously improve our security practices.

Requirements:

• GRC and Information Security: Possess a strong understanding of best practices for Governance, Risk, and Compliance (GRC) within Information Security. Familiarity with standards such as ISO/IEC 27001, PCI-DSS, and NIST CSF. Knowledge of the NCSC’s Cyber Assessment Framework is essential.
• Cyber Operations Expertise: Demonstrate extensive experience in cyber operations, including vulnerability management, endpoint protection, Firewalls, IDS/IPS, Identity and access management, SIEM, and SOC.
• SDLC Integration: Proven experience in embedding cyber security approaches within the Software Development Life Cycle (SDLC).
• Digital Security Awareness: Stay up to date with security aspects related to digitization initiatives, such as remote working and cloud migration.
• Threat Landscape Understanding: Possess a broad understanding of the threat landscape and the ability to inform decision-making based on existing or emerging threats. Maintain close relationships with relevant government agencies like the NCSC.
• Influence and Leadership: Demonstrate the ability to influence organization-wide attitudes towards information risk and cyber security, including at the highest levels. Effectively communicate and drive change throughout the organization.
• Security Policy and Procedure Development: Have a track record of developing and implementing security policies, procedures, and guidelines.
• Team Management Experience: Show demonstrable experience in managing security teams and capabilities to mitigate risks. Adaptability to the needs of our dynamic delivery environment is essential.
• Industry Network and Certifications: Possess a strong network within the cyber security space, including CISO peers. Hold relevant industry or government qualifications and institutional memberships. Professional certifications aligned with the UK Cyber Security Council’s standards are highly desirable.

If you are interested in the role, apply here or send your profile to (see below)