The Director of Cyber Security & Compliance will own and shape Global Guardian's cyber security capability across its UK operations. Working directly with the CIO, this individual will define and deliver a cyber security strategy aligned to the organisation's wider technology and business objectives, leading security and compliance programmes, influencing engineering teams, managing strategic security partners and ensuring Global Guardian remains ahead of an evolving threat landscape.
This is an autonomous leadership role requiring an individual who can balance strategic direction with hands-on execution. You will champion cyber resilience, information security, data privacy and regulatory compliance, embedding security best practice across the organisation, its technology platforms, enterprise systems and third-party partnerships. Acting as the organisation's cyber security lead, you will protect critical business assets against both internal and external threats while helping shape the future cyber capability of a fast-growing global business.
Strategy & Planning
- Define and continually evolve the organisation's cyber security strategy by anticipating emerging threats, technologies and regulatory developments, ensuring Global Guardian remains ahead of an evolving risk landscape.
- Define the organisation's cyber security roadmap by continuously assessing emerging threats, technologies and industry trends.
- Partner closely with software engineering teams to ensure security is embedded into platform architecture, development practices and cloud infrastructure from design through deployment.
- Influence executive stakeholders to ensure cyber security remains embedded within business strategy, product development and operational decision making.
- Partner with the CIO in managing cyber security vendor partnerships
Procurement
- Instigate and maintain annual vendor risk assessments and acceptance criteria for all technology-related investments.
- Partner with engineering teams to ensure secure-by-design principles are embedded throughout platform architecture and software delivery.
Governance and Risk management
- As the company DPA, advise business owners of the risks and solutions to ensure technology and business processes comply with legislation including GDPR, CCPA, Data Protection Act and other major Privacy compliance requirements as they evolve.
- Validate and continually improve enterprise-wide disaster recovery strategies and business continuity plans to ensure known and achievable recovery objectives.
- Own the organisation's security assurance process, providing executive oversight of client due diligence, security audits and complex information security enquiries.
- Establish and embed effective cyber risk, governance and change management frameworks across the organisation.Provide strategic security leadership during major client bids and procurement activities, ensuring security requirements are understood, addressed and used as a competitive differentiator.
- Ensure Company is following compliance frameworks (eg, ISO 27001) and maintains current and future certifications
Operational Management
- Own the continual improvement of the organisation's security architecture, controls and technical standards across all business entities.
- Define the cyber strategy for new and existing security platforms across all business entities.
- Own platform data flow and risk maps
- Act as the organisation's cyber security leader, influencing technical and non-technical stakeholders whilst championing a culture of security across the business.
- Ensure Company security policies and procedures are being followed within the organisation
Incident response
- Plan and manage the response to security breaches and other security incidents, including coordination and recovery efforts
- Lead response to any real or perceived breach internally and with external Cyber security partners
Leadership
Leadership in this role comes through influence rather than hierarchy. You'll lead external partners, shape technical direction, influence engineering teams and become the trusted cyber adviser to the CIO and wider business.
What Success Looks Like
This role will suit someone who:
- enjoys operating with significant autonomy
- takes ownership without waiting for instruction
- is comfortable making informed decisions independently
- enjoys building rather than maintaining
- can balance strategic thinking with hands-on delivery
- naturally identifies problems before they become risks
- is trusted to represent cyber security across the organisation
Career Opportunity
This appointment is expected to evolve as Global Guardian continues to expand internationally.
The successful individual will have the opportunity to develop into the Group CISO as the organisation's cyber capability and technology function continues to mature.
Pay: £80,000.00-£100,000.00 per year
Benefits:
- Company pension
- Cycle to work scheme
- Gym membership
- On-site parking
- Private medical insurance
Experience:
- Cybersecurity: 5 years (required)
- Incident response: 5 years (preferred)
- Leadership: 2 years (preferred)
Work authorisation:
- United Kingdom (required)
Location:
- Poole BH15 1JF (preferred)
Work Location: Hybrid remote in Poole BH15 1JF
