At a Glance
- Tasks: Lead the Council's cyber security strategy and protect our community.
- Company: Join Enfield Council, a diverse and values-driven organisation.
- Benefits: Enjoy up to 32 days annual leave, excellent pension, and flexible working options.
- Why this job: Shape the future of cyber resilience during a significant organisational transformation.
- Qualifications: Proven experience in cyber security leadership and strategic decision-making.
- Other info: Be part of a culture that values fairness, inclusion, and community service.
The predicted salary is between 60000 - 80000 £ per year.
We are seeking a Head of Information and Cyber Security to lead our organisation wide approach to protecting the Council and the people we serve. This is a senior, high impact leadership role for a professional who can combine technical authority with strategic influence, partnership working, and confident decision making at the highest levels. This role requires a regular onsite presence to provide visible leadership, engage with senior stakeholders, and lead during incidents.
About the role
This is a strategic leadership role. While you will bring strong technical credibility, hands on configuration or operational delivery are not the focus of this post.
As our Head of Information and Cyber Security, you will:
- Lead the development, implementation and continuous improvement of the Council's cyber security framework, aligned to our Digital, Data and AI Strategy.
- Provide clear, evidence based advice and guidance to senior leaders, Members, and corporate boards, representing Digital Services at Audit Committee, Assurance Board, Overview & Scrutiny and Cabinet.
- Shape and drive innovative approaches to information and cyber security, ensuring our systems, services and solutions are secure by design.
- Manage and inspire a multidisciplinary inhouse team and ensure effective oversight of key suppliers and partners.
- Oversee the Council's readiness for cyber incidents and personally lead the response to major technical security events, working closely with bodies such as the NCSC, LOTI and regional cyber-resilience networks.
- Ensure cyber security is embedded into business continuity, risk management, procurement, and major change programmes.
- Drive measurable organisational awareness and culture change, promoting secure behaviours across a diverse workforce.
- Maintain compliance with major frameworks and standards including PSN, PCIDSS, DPA, GDPR and ISO27001.
- Manage budgets, contribute to business cases and ensure value for money in all activity.
About you
We are looking for a candidate who brings experience of working in an environment with high public accountability, political scrutiny, legacy and modern technology estates, constrained budgets, and live service risk, delivering at pace while ensuring security and resilience.
You will have personally led complex cyber incidents through decision making, stakeholder communication, regulatory engagement, and recovery.
You will also bring:
- Demonstrable capability in cyber security risk management, security frameworks, service management and incident response at scale.
- Experience influencing senior stakeholders and communicating complex issues clearly to nontechnical audiences.
- A strong track record of leading, developing and motivating a high performing team.
- Deep knowledge of standards such as ISO27001, PCIDSS and associated regulatory frameworks.
- Experience holding suppliers to account, including challenging assurance, delivery quality, and value for money.
Qualifications
At least one of the following (or an equivalent qualification we can independently verify):
- CISSP
- CISM
- CRISC
Leadership & behavioural qualities
We want a leader who:
- Takes responsibility with a positive, problem-solving mindset.
- Acts with openness, honesty and respect.
- Listens actively, reflects and adapts.
- Works collaboratively across boundaries to find solutions.
Other requirements
This role requires a minimum of two days per week onsite in Enfield, with additional attendance during major incidents, key meetings, or periods of heightened risk.
Why Enfield Council?
Working for Enfield means joining a diverse, values-driven organisation that is committed to fairness, inclusion and improving outcomes for all residents. You'll shape the Council's cyber resilience at a time of significant organisational transformation, with committed leadership and dedicated investment in digital innovation and security.
We welcome applications from candidates of all backgrounds and encourage applications from under-represented groups. We are a Disability Confident employer.
How to apply
If you are an experienced cyber security leader with the strategic vision, professional credibility and inclusive leadership style to shape Enfield's security future, we would love to hear from you.
We do not see your name or title when shortlisting your application. This is one of many initiatives to build a more talented and diverse workforce. However, if you put your name on your CV or Statement it will be visible to us. For this reason, we ask that you do not include your name on these documents. Please note it is your responses to the Essential/Desirable criteria, as detailed in the Job Description and Person Specification which is available on the job advert, that will determine if you are shortlisted for an interview, therefore we encourage you to always address the essential and desirable criteria in your application/CV.
We are passionate about our people and how we deliver services to our community in Enfield. That's why we encourage a culture that puts our customers at the heart of everything we do - by empowering our people to work together to find solutions, be open, honest and respectful, take responsibility and listen and learn. If you value these behaviours too, we'd love to hear from you - and of course we are always happy to talk flexible working.
Why it's great to work for Enfield Council:
- An excellent pension through the Local Government Pension Scheme (LGPS).
- Up to 32 days annual leave depending on grade and length of service. You will also get eight public holidays per year and an extra day off at Christmas.
- A blend of remote and office based working for most roles.
- Interest free season ticket loan repayable over three or ten months.
- Career development and learning experiences from a range of training courses and learning methods.
- Employee Assistance Programme to provide advice and counselling services. This is a free and confidential service available to staff and members of their family.
- Health and leisure discounts and tax-free bikes for work.
- 1 month's paid sabbatical for registered Social Workers working in Children's Social Care.
We reserve the right to close this vacancy once a sufficient number of applications have been received. Therefore, we advise that you complete fully and submit your application as soon as possible to avoid disappointment.
If you have previously applied for this role within the past 6 months, unfortunately, a second application will not be considered.
Head of Information and Cyber Security employer: Enfield Council
Contact Detail:
Enfield Council Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Head of Information and Cyber Security
✨Tip Number 1
Network like a pro! Reach out to your connections in the cyber security field and let them know you're on the hunt for a new role. Attend industry events or webinars to meet potential employers and get your name out there.
✨Tip Number 2
Prepare for interviews by researching the organisation thoroughly. Understand their cyber security challenges and think about how your experience can help them tackle these issues. Tailor your responses to show you’re the perfect fit for their needs.
✨Tip Number 3
Showcase your leadership skills! Be ready to discuss how you've inspired teams and driven change in previous roles. Use specific examples that highlight your strategic influence and decision-making prowess.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re genuinely interested in the role and the organisation.
We think you need these skills to ace Head of Information and Cyber Security
Some tips for your application 🫡
Show Your Unique Experience: When you're writing your application, make sure to highlight your own experiences and decision-making skills. We want to see how you've tackled challenges in the past, especially in cyber security incidents. Avoid generic statements; be specific about what you've done!
Address the Criteria Directly: Take a good look at the essential and desirable criteria listed in the job description. Make sure your application clearly addresses these points. This is crucial for us to see how you fit the role, so don’t skip this step!
Be Authentic and Personal: We love seeing your personality shine through in your application. Use your own voice and style to convey your passion for cyber security and leadership. Remember, we’re looking for someone who can inspire and lead, so let that come across!
Apply Through Our Website: Make sure to submit your application through our website. It’s the best way for us to receive your details and ensures everything is in one place. Plus, it shows you’re serious about joining our team at Enfield Council!
How to prepare for a job interview at Enfield Council
✨Know Your Cyber Security Frameworks
Make sure you’re well-versed in the key frameworks and standards mentioned in the job description, like ISO27001 and PCIDSS. Be ready to discuss how you've applied these in your previous roles, as this will show your technical credibility and strategic influence.
✨Prepare for Scenario-Based Questions
Expect questions that ask you to describe how you’ve handled complex cyber incidents. Prepare specific examples that highlight your decision-making process, stakeholder communication, and recovery strategies. This will demonstrate your hands-on experience and leadership capabilities.
✨Showcase Your Leadership Style
This role requires a strong leader who can inspire a multidisciplinary team. Be prepared to discuss your approach to team management and how you foster collaboration and motivation among team members. Highlight any past successes in driving culture change around cyber security.
✨Engage with Stakeholder Communication
Since you'll be advising senior leaders and corporate boards, practice explaining complex cyber security issues in simple terms. Use examples from your experience where you successfully communicated technical information to non-technical audiences, showcasing your ability to influence and engage stakeholders.