At a Glance
- Tasks: Lead UCL's information and cyber security strategy to protect our digital landscape.
- Company: Join UCL, a top-ranked university known for its innovative research and education.
- Benefits: Negotiable salary, 41 days holiday, pension scheme, and on-site gym.
- Other info: Flexible working options and commitment to diversity and inclusion.
- Why this job: Make a real impact in securing a prestigious institution while leading a dynamic team.
- Qualifications: Senior-level experience in information security and strong risk management skills.
The predicted salary is between 120000 - 150000 £ per year.
About us
UCL is consistently ranked among the world's top 10 universities, home to over 50,000 students and 17,000 staff, and renowned for its pioneering research, transformative education, and global impact. As our digital landscape grows in scale and complexity, the security of our information, systems and research has never been more critical.
About the role
Reporting directly to the Chief Information Officer, you will be accountable for all aspects of information and cyber security at UCL. You will set the vision for our Information Security Group (ISG), lead the development of a university-wide security strategy, and ensure that UCL remains secure, resilient, and trusted as we deliver world-class teaching and research. You will work in partnership with academic faculties, professional services, and senior leaders to embed a strong security culture, ensure security is considered in all change initiatives, and oversee the design and operational effectiveness of UCL's security controls framework.
- Set the overall vision and strategy for information and cyber security at UCL.
- Provide overall vision and strategy for the UCL Information Security Group (ISG).
- Lead the creation and delivery of UCL's security strategy and roadmap.
- Champion a strong, measurable security culture across the university.
- Partner with academic schools and professional services to manage and mitigate security risk.
- Ensure UCL is secure by design, with security embedded in all activities and change programmes.
- Own and maintain all security policies, standards and frameworks.
- Oversee the design and operational effectiveness of UCL's security controls framework.
- Work closely with the Data Privacy Officer to ensure appropriate data protection controls.
- Act as a visible, credible leader for security within UCL and the wider sector.
About you
You will bring:
- Significant senior-level experience in information security leadership, with deep expertise in risk management.
- Proven delivery and expertise in Information Security and deep understanding of risk management principles.
- A track record of transforming security in large, complex, matrixed organisations.
- Strong knowledge of security technologies, strategies, and process design.
- Experience building high-performing teams and leading through influence.
- Excellent stakeholder management skills, with the ability to build trust at the most senior levels.
- A proactive, solutions-focused mindset and the confidence to lead change.
- Outstanding communication skills and the ability to inspire confidence across diverse communities.
Experience in the higher education sector is desirable but not essential.
What we offer
Salary is negotiable for the right candidate the range £120k to £150k. As well as the exciting opportunities this role presents, we also offer some great benefits:
- Base salary is negotiable
- 41 Days holiday (27 days annual leave, 8 bank holiday and 6 closure days)
- Additional 5 days' annual leave purchase scheme
- Defined benefit career average revalued earnings pension scheme (CARE)
- Cycle to work scheme and season ticket loan
- Immigration loan
- Relocation scheme for certain posts
- On-Site nursery
- On-site gym
- Enhanced maternity, paternity and adoption pay
- Employee assistance programme: Staff Support Service
- Discounted medical insurance
This role meets the requirements for a Skilled Worker certificate of sponsorship or Global Talent visa under UK Visas and Immigration legislation. UCL welcomes applications from international applicants who require a visa. We will consider applications to work on a part-time, flexible, and job share basis wherever possible.
Our commitment to Equality, Diversity and Inclusion
As London's Global University, we know diversity fosters creativity and innovation. We are committed to equality of opportunity, to being fair and inclusive, and to being a place where we all belong. We particularly encourage applications from candidates underrepresented in UCL's workforce, including those from Black, Asian and ethnic minority backgrounds, disabled people, and - for Grade 9 and 10 roles - women. Applicants should also familiarise themselves with UCL's policies on Prevention of Bullying, Harassment and Sexual Misconduct Policy and Personal Relationships Policy.
Chief Information Security Officer (CISO) employer: UCL
UCL is an exceptional employer, offering a dynamic work environment that fosters innovation and collaboration among over 17,000 staff. With a commitment to employee growth, UCL provides extensive benefits including 41 days of holiday, a defined benefit pension scheme, and opportunities for flexible working arrangements. As a leader in higher education, UCL promotes a strong security culture while valuing diversity and inclusion, making it an attractive place for professionals seeking meaningful and impactful careers.
StudySmarter Expert Advice🤫
We think this is how you could land Chief Information Security Officer (CISO)
✨Tip Number 1
Network like a pro! Reach out to current or former employees at UCL on LinkedIn. A friendly chat can give us insider info about the culture and what they really value in a CISO.
✨Tip Number 2
Prepare for the interview by diving deep into UCL's recent projects and challenges in information security. We want to show that we’re not just interested in the role, but also in how we can contribute to their mission.
✨Tip Number 3
Practice our pitch! We should be ready to articulate our vision for UCL’s information security strategy. Let’s make it clear how our experience aligns with their goals and how we can lead change effectively.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure our application gets noticed. Plus, we can tailor our submission to highlight how we fit perfectly with UCL’s values and needs.
We think you need these skills to ace Chief Information Security Officer (CISO)
Some tips for your application 🫡
Tailor Your Application:Make sure to customise your CV and cover letter for the CISO role at UCL. Highlight your experience in information security leadership and risk management, as these are key aspects of the job. We want to see how your skills align with our vision!
Showcase Your Leadership Skills:Since this role involves leading the Information Security Group, it's crucial to demonstrate your ability to build high-performing teams and influence stakeholders. Share specific examples of how you've successfully led change in previous roles.
Communicate Clearly:Outstanding communication skills are a must for this position. When writing your application, be clear and concise. Use language that inspires confidence and shows your proactive mindset. We want to feel your passion for security!
Apply Through Our Website:Don't forget to submit your application through our official website! This ensures that your application is processed correctly and gives you the best chance to shine. We can't wait to see what you bring to the table!
How to prepare for a job interview at UCL
✨Know Your Stuff
Make sure you brush up on the latest trends and technologies in information security. Familiarise yourself with UCL's current security policies and frameworks, as well as any recent incidents or challenges they may have faced. This will show that you're not just interested in the role, but also invested in the institution's mission.
✨Showcase Your Leadership Skills
As a CISO, you'll need to demonstrate your ability to lead and influence others. Prepare examples of how you've successfully built high-performing teams and managed stakeholders in previous roles. Highlight your experience in transforming security cultures within large organisations, as this will resonate well with UCL's vision.
✨Communicate Clearly
Outstanding communication skills are crucial for this role. Practice articulating complex security concepts in simple terms, as you'll need to inspire confidence across diverse communities. Consider preparing a brief presentation on a relevant topic to showcase your ability to convey important information effectively.
✨Emphasise Collaboration
UCL values partnerships across academic faculties and professional services. Be ready to discuss how you've successfully collaborated with various departments to manage and mitigate security risks. Share specific examples of how you've embedded security into change initiatives, demonstrating your proactive approach to security management.