Fractional Head of Information Security, Part Time

The Company is seeking a part-time Head of Information Security to define and deliver an integrated security strategy across IT, operational technology, and digital environments. The role will build a cohesive, outcome-driven security function spanning architecture, risk and assurance, cyber defence, incident response, and supply chain security. Responsibilities include strengthening detection, response, and recovery; embedding reusable security controls into technology and business delivery; and improving supplier security and network segmentation. The successful candidate will also provide clear, data-driven cyber risk insight to senior leadership and the Board, while fostering a security-aware culture. Candidates should have a proven record of leading security operations and incident response teams, integrating security functions, and embedding security into business and technology programmes. Strong knowledge of security architecture, threat modelling, and security tools and techniques is required, along with experience in highly regulated environments and the ability to balance risk, cost, and business agility. Applicants should be confident influencing executive and Board decisions and understand emerging threats, geopolitical risks, and regulatory developments. Familiarity with relevant security and privacy standards and regulations, including NIS, GDPR, ISO, PCI DSS, NIST, CIS, and OWASP frameworks, is essential.