Key Responsibilities
IT Strategy & Leadership
Develop and deliver an IT and cyber security strategy aligned with business priorities and group requirements.
Provide leadership across IT service delivery, infrastructure management and security governance.
Maintain secure, efficient and resilient technology platforms.
Advise senior executives on technology risk, investment decisions and digital transformation opportunities.
Cyber Security & Information Governance
Security Strategy & Governance
Establish and maintain cyber security policies, standards and governance frameworks across both businesses, ensuring alignment with group policies.
Lead and promote a company wide cyber security awareness and training programme.
Information Security Management
Monitor, assess and respond to security threats, incidents and vulnerabilities.
Ensure compliance with data protection legislation and internal policies.
Implement security controls, access management processes and user awareness initiatives.
Coordinate regular security audits and risk assessments.
Act as the accountable executive for cyber security, ensuring robust governance, risk management and compliance.
Maintain effective security controls aligned with recognised industry frameworks and group requirements.
Certification & Frameworks
Lead the implementation and ongoing maintenance of Cyber Essentials Plus.
Ensure continued alignment with recognised security standards, best practice and group policies.
Audit & Assurance
Manage internal, customer and external cyber security audits.
Coordinate evidence submission and oversee timely remediation of findings.
Risk Management
Establish and maintain a cyber risk management framework.
Conduct risk assessments across systems, users, suppliers and business processes.
Incident Response
Lead the organisation's cyber incident response capability, including investigation, remediation and continuous improvement.
Business Continuity & Resilience
Ensure robust business continuity and disaster recovery capabilities for critical IT systems.
Regularly test, review and enhance recovery procedures.
Regulatory & Threat Monitoring
Monitor emerging threats, regulatory developments and industry trends, communicating insights clearly to senior stakeholders.
Ensure security controls evolve to address new and emerging risks.
Data Protection & Access Governance
Oversee identity management, system access governance and data protection practices.
Technology Investment & Budget
Manage IT budgets across both businesses, ensuring cost effective service delivery and operational performance.
Develop a technology investment roadmap.
Ensure secure, value driven technology solutions.
System Development
Following the implementation of Odoo/Zoho, work with senior leaders and support partners to optimise system functionality and reporting.
Support the development and enhancement of the IFS ERP system in the second business.
Ensure seamless and efficient integration with the website platform.
IT Service Delivery & Operations
Service Management
Ensure reliable, effective day to day IT service delivery across both businesses.
Act as the senior escalation point for critical service issues.
Supplier & MSP Management
Manage relationships with Managed Service Providers and technology vendors.
Monitor performance and ensure contractual and service level compliance.
Infrastructure & Cloud Services
Oversee the development and security of infrastructure and cloud environments.
Ensure strong governance and security across Microsoft 365 platforms.
Technology Projects
Provide leadership and oversight for IT and digital transformation projects.
Ensure security, resilience and compliance are embedded into all new systems and solutions.
The Candidate:
Essential:
Proven background in IT leadership or cyber security management.
Strong capability in information security governance, frameworks and compliance.
Hands on experience operating and maintaining Information Security Management Systems (ISMS).
Track record of leading security audits, certifications and risk management programmes.
Solid understanding of Microsoft 365 and cloud security controls.
Experience overseeing third party IT providers and service delivery performance.
Ability to combine strategic direction with operational execution.
Excellent communication skills and confidence engaging senior stakeholders.
Qualifications & Certifications
Essential:
Degree in IT, Cyber Security, Information Security or equivalent professional experience. OR Extensive experience in IT leadership and cyber security roles.
Desirable:
Working knowledge of data, scripting or automation tools (e.g., SQL, PowerShell, VBA) is desirable.
Experience delivering cyber security accreditations with external consultants.
Background in system implementation and change management.
Familiarity with Odoo, Zoho or IFS ERP systems.
The Consultancy:
Edwards & Pearce acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers. Edwards & Pearce is an Equal Opportunities Employer
Salary description
£50000.00 - £60000.00 per year