Head of Security Operations

Salary: £97,000 - £105,000

Contract Type: 12 month maternity cover

Work Life Balance: Hybrid, 2 days per week at our Northampton office

Candidate Journey: Our goal is to reply to applications within 3 working days. Additionally, we make sure to acknowledge, evaluate, and respond to all applications as a way of showing our appreciation for your time and effort in applying to us.

At Staysure Group, we're committed to delivering exceptional experiences for our customers while maintaining the highest standards of information security and data protection.

We're looking for an experienced and motivated Head of Security Operations to join our Information Security team on a maternity cover basis. This is an excellent opportunity to lead a well-established security operations function, working closely with senior stakeholders to ensure our security controls, processes and technologies continue to protect the organisation against an evolving threat landscape.

The Opportunity

As Head of Security Operations, you'll be responsible for leading our operational security capability, ensuring effective threat management, regulatory compliance and continuous improvement across the security function.

You'll manage a team of 3 Information Security Analysts and 3 Security Engineers in Sri Lanka, oversee security operations activities, and play a key role in driving security awareness and best practice throughout the business.

Key Responsibilities

• Act as the organisation's 1.5 Line of Defence for Information Security
• Build out and manage the 1st Line of Defence; 3 Information Security Analysts in Sri Lanka
• Manage the Security Testing Team; 3 Security Engineers in Sri Lanka
• Oversee security incident management from both operational and compliance perspectives
• Drive vulnerability management activities and remediation programmes
• Manage and optimise security tooling and monitoring capabilities
• Analyse threats and vulnerabilities, ensuring appropriate escalation and response processes are in place
• Lead threat intelligence activities and coordinate remediation actions
• Manage security controls supporting PCI DSS compliance
• Develop and maintain reporting and Measures of Effectiveness for ISO 27001
• Identify, assess and report on information security risks
• Support audits, assessments, testing and compliance reviews
• Review existing security technologies and recommend enhancements where appropriate
• Develop and maintain information security policies, procedures and standards
• Build strong relationships across the business, promoting a positive security culture and embedding security best practice

About You

You'll be a security professional with a strong operational background, excellent leadership skills and the ability to influence stakeholders at all levels.

Essential Skills & Experience

• CISSP, CISM or CRISC certification
• ISO 27001 Lead Implementor/Auditor qualification, or a minimum of three years' experience supporting an ISO 27001-certified organisation
• Strong knowledge of security frameworks including ISO 27001, ISO 22301, PCI DSS and ITIL
• Experience developing, implementing and maintaining information security policies and procedures
• Deep understanding of security technologies, controls and operational security practices
• Experience assessing control maturity and driving continuous improvement
• Proven experience managing security incidents, operational security services and information security risks
• Understanding of the opportunities and risks associated with AI technologies
• Knowledge of GDPR and the Data Protection Act 2018
• Understanding of Disaster Recovery and Business Continuity planning
• Knowledge of cloud technologies and cloud security principles
• Excellent stakeholder management, communication and influencing skills
• Strong presentation skills with the ability to engage technical and non-technical audiences alike

We’re assembling a diverse team, where skills, not checkboxes, reign supreme, regardless of race, religion, sex, sexual orientation, gender identity or disability.

Staysure Group welcomes all new starters with open arms, providing training, development opportunities, and great benefits.