We use cookies to make your experience of using our website better. To comply with the e-Privacy Directive we need to ask your consent to set these cookies.

Head of Information Security & Cyber Security / Group CISO

col-narrow-left 

Job ID:

1707161

Location:

London 

Salary:

per annum
col-narrow-right 

Job Views:

1

Employment Type:

Full time

Posted:

14/09/2020

Closing Date:

12/10/2020
col-wide 

Job Description:

Head of Information Security & Cyber Security / Group CISO
Location - London or Hemel Hempstead

Package: Salary + £7,800 car allowance, family private healthcare, 3% flexible benefits package, life assurance and bonus

The Company

Sopra Steria, European leader in digital transformation, provides one of the most comprehensive portfolios of end-to-end service offerings in the market: Consulting, Systems Integration, Software Development and Business Process Services. Sopra Steria is a trusted by leading private and public organisations to deliver successful transformation programmes that address their most complex and critical business challenges.

The Day Job

Reporting into one of our board members, the Head of Information & Cyber Security is the most senior role responsible for IS and Cyber security across the group of UK businesses (Sopra Steria UK Ltd, Shared Services Connect Ltd, NHS SBS), responsible for creating, setting and ensuring adhere to our IS Security strategy. The strategy is to encompass how we protect our UK business from security threats and vulnerabilities and in addition ensure our bids and contracted services effectively meet our security obligations.

The Head of Information & Cyber Security will work closely with Sopra Steria Group colleagues up to board level to influence on Group information and cyber security strategy and improvement programmes, ensuring the UK business requirements are understood and met. They are to escalate identified risks and vulnerabilities that are dependent on Group resolution ensuring effective solutions are provided.

This role will work closely with the our board, executive directors, presales and delivery teams ensuring our propositions, solutions, projects and services effectively meet IS Security standards ensuring our contractual obligations are met, minimising any potential IS security vulnerability and threat for our customers. The Head of Information & Cyber Security is to command the respect and engage effectively with their counterparts in our clients or targeted client organisations.

The Head of Information & Cyber Security is a recognised information security expert, experienced in working in a commercial environment. They are to be forward thinking, being aware of emerging information & cyber security risks and they are to ensure mitigation solutions are implemented to protect the UK business.

A confident senior leader with the personable skills to empower and inspire teams and IS Security practitioners and have a trusted position within the company and with our customers.

Key Responsibilities

· Shaping the Sopra Steria Groups information security policy, processes and improvement programmes.

· Leading the creation and implementation of an effective UK information security strategy.

· Ensuring a framework for regular information & cyber risk assessments and reporting on ways to minimise threats and vulnerabilities.

· Establishing and ensuring adherence, across the whole business, of our standard methods and approach to ensure our application development services comply with the relevant, current security standards and protocols.

· Managing the information security budget and horizon scanning and providing thought leadership on the latest IT Security innovations.

· Ensuring effective monitoring and reporting is present across all business areas to manage IS security vulnerabilities and threats within the UK infrastructure and network environments.

· Leading and shaping the IS Security contributions to presales and major bids, ensuring effective, appropriate secure solutions, undertaking client presentations and engagements as necessary.

· Managing the security relationship with key suppliers, to ensure that contracts with suppliers are structured such that they are held accountable for having the dependent security in place.

· Managing and holding the suppliers to account during delivery for their security policies and practises which could impact our security performance and so minimise the risk on the UIK business of a security breach from their actions.

· Communicating with key stakeholders about IT security threats.

· Implementing an effective approach for the reporting and management of security incidents.

· Conducting a continuous assessment of current IT security practices and systems and identifying areas for improvement.

Essential Skills

· Experience working as a CISO / Group CISO in a large complex organisation.

· Experience of working in multi-site, complex, IT outsourcing or professional service organisations.

· Experienced and comfortable working at board / executive levels to contribute and influencing wider business direction and decisions.

· Experienced in driving and delivering first-class information & cyber security solutions.

· Establish effective Management Information to better inform IS Security decisions.

· Demonstrable track record of defining effective strategy and leading teams to successfully deliver.

· Proven experience and success in stakeholder/relationship management - credibility and ability to work at all levels internally and in client organisations.

· High impact communication, influencing and presentation skills.

· Effective people management skills - providing direction, monitoring performance, motivating staff and building a positive working environment.

· A passion for technology and security safeguarding with a desire to deliver.

· Thrives on change, showing an impressive ability to drive the information security strategy forward.

· Cyber/information security qualification (CISSP, CISM, CCSP or Equivalent).

· Strong understanding and experience applying of one or more security industry frameworks (E.g. ISO27001, NIST).

Get in touch for more details or to have a confidential discussion about whether this could be the opportunity for you...... click apply for full job details

Company Info
Sopra Steria Limited

Company Profile



Company Info

Sopra Steria Limited

Phone:
Web Site:

Head of Information Security & Cyber Security / Group CISO

col-narrow-left 

Job ID:

1707161

Location:

London 

Salary:

per annum
col-narrow-right 

Job Views:

1

Employment Type:

Full time

Posted:

14/09/2020

Closing Date:

12/10/2020
col-wide 

Job Description:

Head of Information Security & Cyber Security / Group CISO
Location - London or Hemel Hempstead

Package: Salary + £7,800 car allowance, family private healthcare, 3% flexible benefits package, life assurance and bonus

The Company

Sopra Steria, European leader in digital transformation, provides one of the most comprehensive portfolios of end-to-end service offerings in the market: Consulting, Systems Integration, Software Development and Business Process Services. Sopra Steria is a trusted by leading private and public organisations to deliver successful transformation programmes that address their most complex and critical business challenges.

The Day Job

Reporting into one of our board members, the Head of Information & Cyber Security is the most senior role responsible for IS and Cyber security across the group of UK businesses (Sopra Steria UK Ltd, Shared Services Connect Ltd, NHS SBS), responsible for creating, setting and ensuring adhere to our IS Security strategy. The strategy is to encompass how we protect our UK business from security threats and vulnerabilities and in addition ensure our bids and contracted services effectively meet our security obligations.

The Head of Information & Cyber Security will work closely with Sopra Steria Group colleagues up to board level to influence on Group information and cyber security strategy and improvement programmes, ensuring the UK business requirements are understood and met. They are to escalate identified risks and vulnerabilities that are dependent on Group resolution ensuring effective solutions are provided.

This role will work closely with the our board, executive directors, presales and delivery teams ensuring our propositions, solutions, projects and services effectively meet IS Security standards ensuring our contractual obligations are met, minimising any potential IS security vulnerability and threat for our customers. The Head of Information & Cyber Security is to command the respect and engage effectively with their counterparts in our clients or targeted client organisations.

The Head of Information & Cyber Security is a recognised information security expert, experienced in working in a commercial environment. They are to be forward thinking, being aware of emerging information & cyber security risks and they are to ensure mitigation solutions are implemented to protect the UK business.

A confident senior leader with the personable skills to empower and inspire teams and IS Security practitioners and have a trusted position within the company and with our customers.

Key Responsibilities

· Shaping the Sopra Steria Groups information security policy, processes and improvement programmes.

· Leading the creation and implementation of an effective UK information security strategy.

· Ensuring a framework for regular information & cyber risk assessments and reporting on ways to minimise threats and vulnerabilities.

· Establishing and ensuring adherence, across the whole business, of our standard methods and approach to ensure our application development services comply with the relevant, current security standards and protocols.

· Managing the information security budget and horizon scanning and providing thought leadership on the latest IT Security innovations.

· Ensuring effective monitoring and reporting is present across all business areas to manage IS security vulnerabilities and threats within the UK infrastructure and network environments.

· Leading and shaping the IS Security contributions to presales and major bids, ensuring effective, appropriate secure solutions, undertaking client presentations and engagements as necessary.

· Managing the security relationship with key suppliers, to ensure that contracts with suppliers are structured such that they are held accountable for having the dependent security in place.

· Managing and holding the suppliers to account during delivery for their security policies and practises which could impact our security performance and so minimise the risk on the UIK business of a security breach from their actions.

· Communicating with key stakeholders about IT security threats.

· Implementing an effective approach for the reporting and management of security incidents.

· Conducting a continuous assessment of current IT security practices and systems and identifying areas for improvement.

Essential Skills

· Experience working as a CISO / Group CISO in a large complex organisation.

· Experience of working in multi-site, complex, IT outsourcing or professional service organisations.

· Experienced and comfortable working at board / executive levels to contribute and influencing wider business direction and decisions.

· Experienced in driving and delivering first-class information & cyber security solutions.

· Establish effective Management Information to better inform IS Security decisions.

· Demonstrable track record of defining effective strategy and leading teams to successfully deliver.

· Proven experience and success in stakeholder/relationship management - credibility and ability to work at all levels internally and in client organisations.

· High impact communication, influencing and presentation skills.

· Effective people management skills - providing direction, monitoring performance, motivating staff and building a positive working environment.

· A passion for technology and security safeguarding with a desire to deliver.

· Thrives on change, showing an impressive ability to drive the information security strategy forward.

· Cyber/information security qualification (CISSP, CISM, CCSP or Equivalent).

· Strong understanding and experience applying of one or more security industry frameworks (E.g. ISO27001, NIST).

Get in touch for more details or to have a confidential discussion about whether this could be the opportunity for you...... click apply for full job details