Head of Information Security

Salary: £97,200 per year

Are you keen to work for an organisation that makes a positive difference for people? We have an opportunity for a committed and credible person to be our Head of Information Security. This is a new role at Mencap so you have the chance to set the standards and make it your own.

This role is perfect for you if you have experience educating senior stakeholders on all things security and changing working practices, and are passionate about digital information security, governance and risk management.

You may already be in a similar role in a large, complex organisation, or you might be an IS Manager ready for the next step. You will be responsible for technical and non-technical aspects of information security. The successful candidate will therefore have expertise ineither or both aspects, and a proven interest in learning new skills, technologies and techniques to ensure Mencap’s continually evolving environment remains well protected.

The role involves engaging with all departments within Mencap and as such requires the ability to engage and communicate with a wide variety of audiences, from support service managers to colleagues in IT and Communications. You will work closely with the Heads of Data and Data Protection, the IT Director, and will be supported by a prefer Information Security and Data Protection Coordinator.

We offer flexible working and you may be based at our office in London, Peterborough or at home. Yet you will of course build a visible presence throughout the organisation.

What will you be doing?

* Foster strong relationships with all departments and relevant third parties.

* Provide expert consultancy on information security requirements considering people, processes and technologies.

* Establish and chair and Information Security Governance group with representation from all directorates.

* Lead on regular internal/external audits and penetration testing.

* Assess and identify risks, ensuring they are mitigated or remediated by working with all relevant parties.

* Ensuring Mencap maintains its ISO 27001 certification.

* Incident management.

* Business continuity planning.

* Network security.

* Continually improve the Information Security Management System.

* Present updates to the board and executive team detailing current level of security with risk levels and mitigating actions.

* Ensure all projects consider security implications throughout the project lifecycle.

What skills/experience are we looking for?

* Governance, Risk and Compliance – Including ISO 27001.

* Several years’ information security and cyber risk experience.

* Data management and business audits.

* Experience working in a large multi-site and multi-discipline environment.

* Ability to educate, engage and communicate with stakeholders at all levels.