Matalan
Head of Cyber Security
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Salary: Competitive plus benefits
Working Pattern: Full Time
Contract Type: Permanent
About Matalan
From humble beginnings to disruptive innovations in the retail industry, find out about how Matalan is ever-evolving here.
We know as a team, we are stronger together – we champion equality for all and make lasting connections that go beyond work. We thrive off our inclusive culture, encouraging our colleagues to bring their true selves to work and contributing to collective creativity, open-mindedness and growth.
We want give every candidate the opportunity to perform at their best throughout the application and interview process and then ultimately in their role. If you require any adjustments during our recruitment process, please don’t hesitate to let us know.
In the event that a high volume of suitable applications are received, the post may close prior to the specified closing date. Please apply as soon as possible if interested.
About The Role
The Head of Cyber Security / CISO is accountable for leading Matalan’s cyber security strategy, governance, risk management and operational resilience at a senior, non-board level. The role provides dedicated ownership of cyber risk, security architecture, incident readiness, supplier security and continuous improvement, ensuring cyber security priorities are translated into clear business outcomes, measurable risk reduction and effective protection of Matalan’s customers, colleagues, data and critical services.
Key Responsibilities
Leadership
- Lead and develop Matalan’s internal cyber security capability, ensuring the right skills, succession plans and accountabilities are in place across cyber governance, architecture, delivery and continuous improvement
- Provide senior cyber security leadership and advice to the Director of IT, Executive team and relevant governance forums, translating technical risk into clear business impact and decision options
- Lead the performance management of cyber security contractors, managed service partners and specialist third parties, ensuring clear ownership, challenge and delivery against agreed outcomes
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Cyber Strategy, Governance And Risk Management
- Own and maintain Matalan’s cyber security strategy and roadmap, ensuring priorities are risk-led, business aligned and focused on measurable improvements in resilience and recovery
- Establish and embed cyber governance, risk and compliance processes, including policies, standards, risk appetite, risk assessment, control assurance and reporting
- Maintain a transparent view of cyber threats, vulnerabilities, control gaps and enterprise cyber risks, ensuring decisions are prioritised using business impact and agreed risk appetite
- Lead cyber security reporting for IT leadership, Executive forums and relevant governance groups, providing clear insight on risk posture, progress, investment choices and residual risk
Security Architecture, Operations And Incident Readiness
- Ensure cyber security is embedded into technology strategy, architecture, change delivery and supplier solutions from the outset, reducing risk and rework
- Oversee security operations, monitoring, vulnerability management, identity security, endpoint controls, network security and logging improvements delivered through internal teams and managed service partners
- Own cyber incident readiness and response leadership, including incident response plans, rehearsals, CIRT mobilisation, technical response coordination and lessons learned
- Drive continuous improvement of cyber controls, ensuring audit findings, incident lessons, maturity assessments and threat intelligence translate into prioritised action
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Supplier And Third-Party Cyber Risk
- Establish and oversee third-party cyber risk management, ensuring critical suppliers, SaaS providers and technology partners are assessed, governed and monitored proportionately to risk
- Work with Procurement, Legal, Vendor Management and business owners to embed cyber security obligations into supplier onboarding, contracts, assurance activity and incident escalation routes
About You
- Senior cyber security leadership experience in a complex, business-critical technology environment, ideally across retail, ecommerce, logistics or similarly operational environments
- Strong understanding of cyber governance, risk management, compliance, incident response, security architecture, vulnerability management, identity and access, supplier risk and security operations
- Experience translating technical cyber risks into clear business impact, investment choices and executive-level decisions
- Experience leading internal teams, managed security partners, contractors and specialist cyber suppliers through clear outcomes, governance and performance management
- Relevant cyber security qualifications or equivalent experience are desirable, such as NCSC CAF, NIST, DORA or related security risk frameworks
Benefits
- In addition to competitive salaries, we also offer the below core benefits:
- 20% staff discount, which increases with length of service
- Thrive Recognition Scheme
- Wellbeing support provided by the Retail Trust
- Life Assurance
- Retail Rewards platform offering discounts for other retailers
- Pension Scheme
- Access to a wide range of career development
- Additional benefits may apply depending on your role and area of the business
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London