Chief Information Security Officer (City of Edinburgh)

Social network you want to login/join with:

Chief Information Security Officer, Edinburgh

col-narrow-left

Client:

Motability Operations

Location:

Edinburgh, United Kingdom

Job Category:

Other

–

EU work permit required:

Yes

col-narrow-right

Job Reference:

5615cf41bd25

Job Views:

6

Posted:

25.06.2025

Expiry Date:

09.08.2025

col-wide

Job Description:

About The Role: The Chief Information Security Officer (CISO) is a senior leader responsible for establishing and maintaining the organisation's vision, strategy, and programs related to information security. The CISO plays a crucial role in safeguarding the organisation's sensitive data, intellectual property, and information systems from potential threats and cyberattacks.

The CISO collaborates with various departments, including IT, legal, business risk, and business units, to ensure the implementation of effective security measures and adherence to industry best practices and regulatory requirements. As CISO, you will be responsible for:

• Information Security Strategy: Develop and communicate a comprehensive information security strategy that aligns with the overall business goals and objectives. Ensure adherence to this strategy across the entire technology estate.
• Risk Management: Identify, assess, and prioritise security risks, considering potential impact on the organisation's operations, reputation, and finances. Implement security risk mitigation measures and develop an information security risk-aware organisational culture.
• Security Governance: Work with the Data Protection team to establish and maintain the organisation's information security governance framework and ensure appropriate technical guardrails are in place, including policies, standards, and procedures. Ensure compliance with applicable laws, regulations, and industry standards (e.g., GDPR, ISO 27001, NIST Cybersecurity Framework).
• Incident Response: Oversee the development and testing of technology incident response plans. Coordinate with relevant stakeholders to promptly respond to and resolve cybersecurity incidents, minimising damage and potential downtime.
• IT Continuity: Ensure disaster recovery testing takes place and provide support to the Business Risk division to manage IT continuity risks. Represent IT continuity in the Business Risk and DR committee.
• Security Architecture: Collaborate with IT teams to design, implement, and maintain secure IT infrastructure, applications, and networks. Work with the IT Architecture team to ensure security controls are built into technology solutions from the outset.
• Vendor and Third-Party Risk Management: Implement a process to assess and monitor the security posture of third-party vendors and service providers with access to the organisation's systems or data.
• Security Compliance and Auditing: Regularly review security measures and support internal audits to assess the effectiveness of security controls. Address findings and ensure timely remediation.
• Security Incident Reporting: Report to leadership on the organisation's security posture, potential risks, and ongoing security initiatives. Communicate effectively to raise awareness and support for information security initiatives. Chair and/or participate in Security Governance forums, including the Risk Management Committee.
• Industry Knowledge and Innovation: Stay abreast of the latest cybersecurity threats, trends, and technologies. Evaluate and introduce innovative security solutions to enhance the organisation's overall security posture.
• Budgeting, Supplier and Cost Control: Prepare and manage the Information Security department budget, controlling expenses, and optimising spending while maintaining high standards of service delivery. Manage department suppliers to ensure value for money and timely delivery of services, aligning with procurement strategies.
• Team Leadership: Lead, mentor, and inspire the Information Security team. Foster a culture of innovation, accountability, and collaboration. Define ways of working and standards for Information Security in MO technology. Work with key partners to build a consistent approach and address gaps in the organisation.

About You: Minimum Criteria

• Proven significant experience in information security and leadership roles.
• Strong knowledge of cybersecurity principles, best practices, and industry standards.
• In-depth understanding of data protection and privacy regulations.
• Strong leadership, communication, and interpersonal skills.
• Strategic thinking with the ability to align security initiatives with business goals.
• Analytical and problem-solving skills for risk assessment and solutions.
• Experience in budgeting and resource management.
• Relevant certifications (e.g., CISSP, CISM, CISA).

About The Company: Motability Operations is dedicated to providing worry-free mobility solutions to over 630,000 customers across the UK. We lease vehicles with insurance, maintenance, and breakdown assistance included. As the largest car fleet operator in the UK, we work with around 5,000 car dealers and major manufacturers. We pride ourselves on outstanding customer service, with a satisfaction rating of 9.8 out of 10.

Our values are solutions, change, and care. Benefits include competitive rewards, pension, leave, private medical insurance, salary sacrifice schemes, life assurance, health screenings, and more. We promote diversity and inclusivity, providing disability access and flexible working arrangements.

#J-18808-Ljbffr