CISO

Overview

Position: CISO

Location: Hybrid – 2 days per week in Milton Keynes or London

Employment Status: 12 month full-time, contract

Rate: 850pd – 900pd (inside IR35)

Industry: Accountancy

Tria have partnered with a well-established company working in the accountancy industry to hire a CISO on an initial interim basis. This is a strategic leadership role which is responsible for leading the transformation and modernisation of the cyber and information security capabilities. As part of the position, you will shape and execute a security strategy that aligns with the companies\\\’ digital ambitions and evolving risk landscape.

You will lead a complete strategic review of the security landscape, including tools, processes, risk postures, and cultural readiness. Reporting to the board, you will advise on cyber risk, threats, and mitigation strategies. You will be able to translate security insights into executive-level communications, influencing investment and change roadmaps. This is a great opportunity to join a brownfield cyber programme, with the ability to shape and create robust cybersecurity practices for the company.

Please apply ASAP with an up-to-date CV which showcases your experience in the above areas.

Responsibilities

• Lead the transformation and modernisation of the cyber and information security capabilities.
• Shape and execute a security strategy that aligns with the company\\\’s digital ambitions and evolving risk landscape.
• Conduct a complete strategic review of the security landscape, including tools, processes, risk postures, and cultural readiness.
• Report to the board and advise on cyber risk, threats, and mitigation strategies.
• Translate security insights into executive-level communications, influencing investment and change roadmaps.

Qualifications / Skills

• Significant leadership experience in enterprise information and cyber security roles, ideally within complex or regulated environments.
• Proven success in leading strategic reviews and transformations of security toolsets, platforms, and operating models.
• Deep technical knowledge of security controls across hybrid cloud, infrastructure, endpoint, and user environments.
• Practical experience delivering cyber security best practices across network, infrastructure, BYOD, web, and cloud services.
• Strong working knowledge of governance and compliance frameworks including ISO 27001, NIST CSF, GDPR, and Cyber Essentials+.
• Demonstrable ability to communicate complex security concepts to non-technical audiences, including board-level stakeholders.

Keywords: CISO, Cybersecurity, legacy, cloud, operational resilience, CBEST, ISO/IEC 27001, NIST, Cyber Essentials+, information security, Head of Cyber, BYOD