Fractional Head of Information Security

The Company is seeking a Head of Information Security to lead and strengthen its security function in a hands-on contract role. Responsibilities include owning the information security strategy and leading compliance efforts across relevant security and privacy frameworks. The role will embed secure-by-design practices and DevSecOps across engineering, while advancing security through automation and technical controls. The successful candidate will also oversee risk management, threat modelling, vulnerability management, incident response, supplier security, and operational controls, while supporting security audits and improving detection and response with security and engineering teams. Candidates should hold a CISSP, CISM, or equivalent qualification and have proven leadership experience in information security, cyber risk, or assurance. Strong knowledge of ISO 27001, NIST, CIS, PCI DSS, and GDPR is required, along with technical understanding of cloud, application, network, endpoint, and data security. Experience with SIEM/SOC operations, vulnerability management, and incident response is also essential. The role calls for strong stakeholder management and a pragmatic, hands-on approach.