Staysure Group
Head of Security Operations
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
💷 Salary: £97,000 - £105,000
💼 Contract Type: 12 month maternity cover
🏢 Work Life Balance: Hybrid, 2 days per week at our Northampton office
✈️ Candidate Journey: Our goal is to reply to applications within 3 working days. Additionally, we make sure to acknowledge, evaluate, and respond to all applications as a way of showing our appreciation for your time and effort in applying to us.
At Staysure Group, we're committed to delivering exceptional experiences for our customers while maintaining the highest standards of information security and data protection.
We're looking for an experienced and motivated Head of Security Operations to join our Information Security team on a maternity cover basis. This is an excellent opportunity to lead a well-established security operations function, working closely with senior stakeholders to ensure our security controls, processes and technologies continue to protect the organisation against an evolving threat landscape.
🌟The Opportunity
As Head of Security Operations, you'll be responsible for leading our operational security capability, ensuring effective threat management, regulatory compliance and continuous improvement across the security function.
You'll manage a team of 3 Information Security Analysts and 3 Security Engineers in Sri Lanka, oversee security operations activities, and play a key role in driving security awareness and best practice throughout the business.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
🌟Key Responsibilities
- Act as the organisation's 1.5 Line of Defence for Information Security
- Build out and manage the 1st Line of Defence; 3 Information Security Analysts in Sri Lanka
- Manage the Security Testing Team; 3 Security Engineers in Sri Lanka
- Oversee security incident management from both operational and compliance perspectives
- Drive vulnerability management activities and remediation programmes
- Manage and optimise security tooling and monitoring capabilities
- Analyse threats and vulnerabilities, ensuring appropriate escalation and response processes are in place
- Lead threat intelligence activities and coordinate remediation actions
- Manage security controls supporting PCI DSS compliance
- Develop and maintain reporting and Measures of Effectiveness for ISO 27001
- Identify, assess and report on information security risks
- Support audits, assessments, testing and compliance reviews
- Review existing security technologies and recommend enhancements where appropriate
- Develop and maintain information security policies, procedures and standards
- Build strong relationships across the business, promoting a positive security culture and embedding security best practice
🌟About You
You'll be a security professional with a strong operational background, excellent leadership skills and the ability to influence stakeholders at all levels.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
🌟Essential Skills & Experience
- CISSP, CISM or CRISC certification
- ISO 27001 Lead Implementor/Auditor qualification, or a minimum of three years' experience supporting an ISO 27001-certified organisation
- Strong knowledge of security frameworks including ISO 27001, ISO 22301, PCI DSS and ITIL
- Experience developing, implementing and maintaining information security policies and procedures
- Deep understanding of security technologies, controls and operational security practices
- Experience assessing control maturity and driving continuous improvement
- Proven experience managing security incidents, operational security services and information security risks
- Understanding of the opportunities and risks associated with AI technologies
- Knowledge of GDPR and the Data Protection Act 2018
- Understanding of Disaster Recovery and Business Continuity planning
- Knowledge of cloud technologies and cloud security principles
- Excellent stakeholder management, communication and influencing skills
- Strong presentation skills with the ability to engage technical and non-technical audiences alike
We’re assembling a diverse team, where skills, not checkboxes, reign supreme, regardless of race, religion, sex, sexual orientation, gender identity or disability.
Staysure Group welcomes all new starters with open arms, providing training, development opportunities, and great benefits.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills