Chief Information Security Officer CISO in Glasgow

One role, many institutions: help universities, colleges and public bodies across the UK build real cyber resilience. Full Time 35.625 hours per week, 9.5-day fortnight Remote UK-wide, with occasional on-site member meetings and in-service days HEFESTIS is a not-for-profit, member-owned cyber security shared service supporting education and public sector organisations across the UK. Through a collaborative delivery model, we help our members strengthen governance, manage cyber risk, improve resilience and build confidence in their ability to respond to an evolving cyber threat landscape. Our wider ecosystem includes established relationships with Scottish Government’s SC3, Acumen Cyber and Toronto Metropolitan University, giving members access to complementary expertise, capability and sector insight where needed. Our CISO Office brings strategic cyber leadership, engagement management and operational delivery together in a single service. Chief Information Security Officers set direction and provide oversight, while Information Security Officers turn that direction into practical, measurable progress. This combination of leadership, hands-on support and access to a wider network of specialist capability helps members strengthen cyber resilience without having to build every capability themselves. As an Information Security Officer (ISO) in our CISO Office, you will report to the Head of Cyber Security Services (Managing CISO). You will run assessments, manage evidence, produce deliverables and keep member cyber security programmes moving. You will help members translate cyber security advice into organised, repeatable, measurable activity and resilience. Work with member IT, Digital and Cyber teams, suppliers and the supporting CISO to progress agreed activities. Escalate risks, delays and decisions that need CISO or member attention. Deliver capability, resilience, risk and control assessments against recognised standards. Produce and maintain policies, standards, procedures, strategies and roadmaps. Maintain risk, action, decision and evidence records. Support the operation of member governance and risk-management arrangements. Help members implement and embed agreed policies, processes and ways of working. Coordinate cyber exercises, tabletop exercises, workshops and governance forums that build members' incident readiness, alongside the CISO Office team. Contribute to the continual improvement of CISO Office services, templates and delivery methods. Solid experience in information security and risk management, ideally in a client-facing, consulting or shared-service setting. A track record of delivering security assessments and building governance documentation such as policies, standards and procedures. Experience managing evidence, risk registers and action tracking through to completion. Clear written and verbal communication, and the confidence to work with stakeholders from technical teams to senior leaders. A self-starter with a growth mindset, comfortable working remotely and collaboratively within a team. Bachelor's degree in Information Security, Computer Science or a related discipline, or equivalent professional experience. Ability to obtain DBS clearance. Real delivery responsibility across a diverse portfolio of universities, colleges and public sector organisations. The support of a collaborative CISO Office, working alongside experienced CISOs and ISOs. Competitive salary. ~ Pension scheme. ~40 days holiday, made up of annual leave and fixed leave entitlement. ~Remote-first working. ~ Investment in your professional development and certifications. ~ Access to the company benefits suite, including cycle-to-work scheme and gym discounts. Your data will be handled in line with UK GDPR.