Head of InfoSec

Description

The Head of Information Security is responsible for establishing, owning, & driving the global information & cyber security strategy for Centellic. This role provides leadership, governance, & oversight across cyber security, information security, risk management, business continuity, disaster recovery and customer assurance (DDQs).

This position will oversee all security operations, develop enterprise security policies & frameworks, manage third-party risk and lead resilience planning. The Head of Information Security will directly manage the Information Security team and act as the senior authority for cyber & information security within the organisation.

Key Responsibilities

- Develop & own the global information security strategy & roadmap.

• Establish, maintain, & enforce security policies, standards, & procedures.
• Inform stakeholders through reporting on risk, posture, compliance, & incidents.
• Ensure alignment with business strategy, technology transformation, & operational resilience programmes.
• Attend Information Security governance forums & represent security in senior management discussions.
• Liaise with the Data Protection Officer to align security controls with privacy obligations and regulatory requirements.
• Oversee global SOC operations including monitoring, detection, incident triage, & forensic investigations.
• Ensure advanced protection across Microsoft 365, Azure, Intune, Defender, Sentinel SIEM, Cloudflare, DNS, & on-prem environments.
• Lead the improvement of SIEM engineering, log ingestion, alerting, correlation, & automation.
• Ensure continuous protection of identity, endpoints, networks, & cloud services.
• Act as executive owner of the global Incident Response process.
• Lead major incidents, including ransomware, credential compromise, cloud intrusion, web security incidents, or DDoS events.
• Manage RCA, reporting, containment, & lessons-learned processes.
• Maintain, test, & improve incident response plans across UK & US operations.
• Own the global information security risk management framework & risk register.
• Lead all customer assurance & Due Diligence Questionnaire (DDQ) responses.
• Manage compliance with ISO 27001/27002, NIST CSF, SOC 2, CIS, DORA, CE/CE+ requirements.
• Oversee internal/external audits, ensuring evidence collection, remediation tracking, & executive reporting.
• Perform supplier & project risk assessments & approve controls for new systems & services.
• Own the global vulnerability lifecycle, including scanning, reporting, prioritisation, & validation.
• Manage annual penetration testing programmes, including remediation.
• Ensure ongoing alignment with industry baselines & benchmarks.
• Oversee privileged access reviews & secure configuration governance.
• Own & maintain the enterprise BCP & DR strategy & documentation.
• Ensure regular testing, validation, & continuous improvement across all regions.
• Work IT Op, Product / Tech, & business leaders to enhance resilience.
• Oversee secure configuration & governance of Azure, M365, identity, networking, servers, & firewalls.
• Ensure that new & existing applications undergo appropriate security assessment & review.
• Govern Cloudflare, WAF, bot management, DNS security, & zero trust implementations.
• Lead vendor security assessments & approve or reject high-risk suppliers.
• Ensure third-party SOC, compliance, & security requirements are met.
• Own the timely & accurate completion of customer security questionnaires, audits, & DDQs.
• Directly manage & develop the Information Security Lead
• Build strong relationships with all functional teams
• Promote & sustain a strong global “security-first” culture.
• Deliver ELT communication, training, & guidance across the organisation.
• Oversee global security awareness programmes, phishing simulations, & targeted training.
• Ensure consistent & high-quality communication across global teams.

Skills Knowledge and Expertise

- 7–10+ years of progressive experience in Information Security, Cyber Security, Governance, or similar.

• Experience leading a global or multi-region security function.
• Strong background in Microsoft cloud security, SOC operations, risk, compliance, & resilience.
• Demonstrated leadership in managing incidents, risk remediation, & security programmes.
• Experience managing or partnering with engineering, infrastructure, & cloud teams.
• ISO 27001/27002
• NIST CSF
• CIS Controls
• SOC 2
• Cyber Essentials / CE+
• DORA & financial/US regulatory frameworks (beneficial)
• GDPR & US privacy regulations (beneficial)
• Strong leadership with the ability to influence at executive level.
• Excellent communication skills across technical & non-technical groups.
• Clear, calm, & structured thinking under pressure.
• Ability to manage competing global priorities & drive results.
• CISSP, CISM, or CISA
• Microsoft SC-series (SC200, SC300, SC400)
• Azure Security Engineer (AZ500)
• GIAC, CEH, or similar

About Centellic

Centellic stands at the center of the markets it serves, empowering organizations with indispensable data and insight to make critical decisions on growth, risk and opportunity.

Through proprietary data, deep market expertise and AI-enabled technology, our platforms are embedded in client workflows. That capability is underpinned by our events, which bring the market together to share perspective and deepen understanding of the issues shaping each sector. Together, they give organizations earlier visibility of emerging trends, and the clarity and confidence to act when decisions matter.

At Centellic, we’re a global intelligence and information services business, setting the standard for how critical business decisions are made.

Why Centellic?

At Centellic, we help our clients make better decisions, and our people are at the heart of that work. Every individual plays an important role in this, bringing curiosity and high standards to everything they do.

Those who thrive here take ownership, care deeply about their work and are committed to excellence. Standards are high because our people set them that way. And while we have decades of expertise, we are still growing, pushing and building something extraordinary.

Centellic’s advantage is our people and the culture we’ve created together. It’s an environment where individuality is encouraged, relationships are genuine, and there’s a strong sense of purpose in what we’re building together. Collaborative, respectful and driven, we take our work seriously without taking ourselves too seriously.

Benefits

Our people are our most valuable asset, as such, we offer a wide range of benefits to help ensure that all are supported:

Start of employment:

• Eye care
• Employee Assistance Programme
• A day off for your birthday

After 3 months employment:

- Pension (4% employer contribution and 4% employee contribution)

After 4 months employment:

- Life assurance

After probation:

• Cycle to work scheme
• Season ticket loan
• £350 annual wellbeing allowance to contribute to gym memberships or fitness classes
• Puregym access
• Perks at work platform access

After 1 year service:

- Private healthcare

Additional Perks:

• Company socials
• Access to Employee Affinity Networks
• Mentoring scheme
• Volunteering Day
• Mortgage Advice
• Work from anywhere (2 weeks)
• Generous parental leave

We are committed to making our organisation an inclusive, respectful & engaging place to work with a culture shaped by our core values that promote equality, collaboration & respect in everything we do. We are proud to be part of the Disability Confident Scheme, meaning we are committed to being inclusive and accessible, which starts with our application and recruitment process. If you do require any reasonable adjustments to be made, please let us know as part of our application page.

‘We are proud to be an equal opportunities employer and are committed to ensuring that all candidates are given the same opportunity to succeed regardless of their sex, gender identity/expression or reassignment, sexual orientation, marital status, race, colour, nationality, ethnic or national origin, religion, age or disability.’

About Centellic

Please visit our website for more information.