Head of Cyber Security & Information Governance

Head of Cyber Security & Information Governance

Working arrangement: Open to discussion, preference for site presence 1-2 days a week but may consider less for exceptional candidate
Rate: £550-600 a day Inside IR35


The Opportunity

We're supporting a large London-based public sector organisation as it appoints an experienced Head of Cyber Security & Information Governance.

This is a senior leadership role with responsibility for the organisation's overarching approach to cyber security, information risk, data protection and information governance. You'll provide assurance to senior and statutory officers, establish effective standards and ensure that cyber and information risks are understood and managed across a complex organisation.

This is broader than a traditional Information Governance Manager position. While FOI and subject access requests sit within the service, the focus is on leading the complete cyber security and information governance function.

The Role

You will lead the development and delivery of the organisation's cyber security and information governance strategy, ensuring that appropriate policies, standards, controls and assurance arrangements are in place.

Working with statutory officers, senior leaders, technology teams and service owners, you'll provide clear advice on cyber risk, data protection and the responsible use and management of information.

You'll lead a specialist team and provide strategic oversight of cyber security, DPIAs, information incidents, regulatory compliance, information governance policy, FOI and subject access arrangements.

Main Responsibilities

• Lead the cyber security and information governance service.
• Develop and embed cyber, data protection and information governance strategies, policies and standards.
• Advise statutory officers and senior leaders on cyber and information risk.
• Oversee cyber security assurance, threat assessments and organisational responses to significant incidents.
• Ensure effective arrangements are in place for DPIAs, UK GDPR compliance and information risk management.
• Manage serious data and information incidents, including escalation to the ICO alongside the DPO.
• Provide senior-level approval and assurance for major policies and relevant contractual agreements.
• Maintain oversight of FOI, SARs and records management without these becoming the sole focus of the role.
• Lead, develop and set priorities for a multidisciplinary specialist team.
• Work with technology and security teams to improve cyber resilience and organisational preparedness.
• Represent the organisation at governance boards, assurance forums and external partnerships.
• Monitor performance, risk, audit findings and compliance, driving improvement across the service.

The Person

• Significant leadership experience across cyber security, information assurance, data protection or information governance.
• Experience leading a broad service rather than specialising primarily in FOI or SAR casework.
• Strong understanding of cyber security risk, governance, assurance and incident management.
• Detailed knowledge of UK GDPR, the Data Protection Act and wider information governance obligations.
• Experience developing organisational policies, security standards, governance frameworks and controls.
• Confidence advising statutory officers, executive leaders and governance boards.
• Experience overseeing DPIAs, information incidents, audits and regulatory engagement.
• Able to challenge technical specialists and translate cyber and information risks for non-technical stakeholders.
• Strong leadership skills, with experience developing multidisciplinary teams and improving service performance.
• Public sector experience is strongly preferred, particularly within a large and politically accountable organisation.

Relevant cyber security, information assurance or data protection qualifications would be advantageous.

What's on Offer

• £550-£600 per day, Inside IR35.
• A highly visible, senior leadership role within a large public sector organisation.
• Responsibility for shaping its combined cyber security and information governance approach.
• The opportunity to influence senior leadership, organisational policy and risk management.
• An initial contract with scope to make a substantial organisation-wide impact.