LT Harper Recruitment Group
Head of Information Security
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Head of Information Security
£160,000 + benefits
Location: London (hybrid, 2 to 3 days on site)
Type: Permanent, VP level
I'm supporting a growing B2B software business in the financial services space that is looking to hire a Head of Information Security to own its end-to-end security posture as the organisation scales.
The Role
- Own the security posture end to end, from architecture standards and threat modelling through to incident response
- Guide enterprise technology decisions, including cloud strategy and zero trust adoption
- Own vulnerability management, penetration testing, DLP and advanced threat detection
- Define and own the GRC programme, including the ISMS, policy framework, risk registers and audit readiness across ISO 27001, SOC 1, SOC 2, NIST CSF and GDPR
- Own third party risk management, including vendor assessments and ongoing oversight
- Set the strategy and standards for IT Operations, covering infrastructure, tooling and end user support
- Lead, mentor and develop a small team across InfoSec, GRC and IT Ops
- Act as a key partner to the Client Success and Pre-Sales teams, speaking directly with the CISOs and security teams of global financial institutions
- Anticipate emerging threats and set the security vision for an AI-led platform, including the risks presented by agentic systems
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What They Are Looking For
- 8+ years in information security, with at least 3 years in a senior or leadership role
- Hands-on ownership of ISO 27001 and SOC 1 and SOC 2 programmes, not just supporting them
- Genuine, current cloud security depth, particularly AWS, including IAM, logging and observability. This is a build and design role, not a review and report one
- A working understanding of agentic AI: both how to operate it safely, covering areas such as least privilege for agents, human in the loop and prompt sanitisation, and how malicious actors are using AI offensively
- Experience managing security incidents end to end, including client and regulatory communications
- A track record of building and managing TPRM programmes at scale
- Experience in B2B SaaS or fintech, with exposure to enterprise client security requirements
- The credibility to influence a sceptical client CISO, and to present to a board, in equal measure
- Strong written communication, and the ability to translate complex security topics into plain language for non-technical audiences
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Beneficial: DLP, SIEM or SOC build-outs; CISSP, CISM or ISO 27001 Lead Implementer; capital markets, asset management or securities services exposure.
Package
- £160,000 depending on experience
- Hybrid working, 2 to 3 days per week in the London office
This would suit someone who wants full ownership of a security function rather than a slice of one, who is comfortable staying close to the technical detail while leading a team, and who enjoys being the trusted advisor in the room with enterprise clients and their security teams.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location