Deputy Director Chief Information Security Officer

Working Pattern:
Requests for flexible working patterns will be considered and should be discussed with the Hiring Manager upon application. A small amount of home working is possible but there is an expectation that most of this role will be office based.

The UK Intelligence Community (UKIC) is seeking an outstanding Chief Information Security Officer (CISO) to lead cyber security and information governance across some of the nation's most sensitive missions. Accountable to the UKIC Infosec Director, this is one of the most high‑profile technical leadership roles in government, shaping the strategic direction of information security to protect the UK against the most capable and persistent adversaries.

The successful candidate will ensure operational resilience and secure innovation in support of national intelligence objectives, delivering results in a highly complex and rapidly evolving environment.

• Develop, maintain and articulate a clear understanding of the cyber and information security risks inherent across the whole organisation in order to provide assurance to the UKIC Group Senior Information Risk Owner (SIRO).
• Create and implement information security strategy which supports the organisation in determining the right balance between the organisation's cyber and information security capabilities, acceptable level of risk and speed of technology progress.
• Ensure an effective cyber and information security governance framework that is integrated with overall organisational governance.
• Define and track cybersecurity KPIs, producing regular executive and board level reports on security posture.
• Enable the organisation to innovate safely by advising senior leadership on the potential risks and implications of major decisions that impact information security.
• Oversee the creation and implementation of relevant policies and standards which ensure effective information risk management.
• Identify and deliver opportunities for improvement of the security operations function to ensure timely detection and response to security incidents.
• Lead and mentor high‑performing information security professionals, fostering a culture of professional development.
• Play a leading role in multiple technical and programme boards.
• Work closely with stakeholders from across the UK Intelligence Community to ensure an end‑to‑end approach to cyber security and ensure that cyber security is embedded at all levels.

• Exceptional communication skills, with the ability to present complex security concepts to both technical and non‑technical stakeholders at all levels.
• Proven experience developing and implementing information security strategies and policies within a complex organisation.
• In‑depth understanding of cybersecurity threats, technologies and risk management practices.
• One or more professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or Certified Chief Information Security Officer (CCISO) are highly desirable.
• Deep understanding of cloud security.
• Experience leading an operational cyber security function, or the delivery of cyber security capabilities.
• Extensive knowledge of relevant public and private sector cyber security practice.
• Familiarity working with key allied governments is valuable.
• Can work in Cheltenham, Manchester or London with regular presence required there; occasional international travel desirable.
• British citizenship or dual British nationality required; a full eligibility review will be conducted.

• Seeing the Big Picture
• Making Effective Decisions
• Driving Innovation and Change
• Providing Customer Value

GCHQ is the nation's intelligence, cyber and security agency. We work to make the UK the safest place to live and work online; connect the national security community securely; and provide insights and counter threats through SIGINT and effects. Our people work closely with MI5 and MI6 as well as defence, international, and industry partners across a variety of locations, with major hubs in Cheltenham, London and Manchester as well as other sites in the UK and…