Lead Centellic’s global information and cybersecurity strategy, governance, security operations, incident response, risk management, compliance, vulnerability management, business continuity, disaster recovery, cloud security, and third-party assurance. Manage the Information Security team, oversee SOC and major incident processes, maintain security frameworks and controls, guide audits and customer questionnaires, and promote security awareness and resilience across UK and US operations.
The Head of Information Security is responsible for establishing, owning, & driving the global information & cyber security strategy for Centellic. This role provides leadership, governance, & oversight across cyber security, information security, risk management, business continuity, disaster recovery and customer assurance (DDQs).
This position will oversee all security operations, develop enterprise security policies & frameworks, manage third-party risk and lead resilience planning. The Head of Information Security will directly manage the Information Security team and act as the senior authority for cyber & information security within the organisation.
Key Responsibilities
Strategic Leadership & Governance
- Develop & own the global information security strategy & roadmap.
- Establish, maintain, & enforce security policies, standards, & procedures.
- Inform stakeholders through reporting on risk, posture, compliance, & incidents.
- Ensure alignment with business strategy, technology transformation, & operational resilience programmes.
- Attend Information Security governance forums & represent security in senior management discussions.
- Liaise with the Data Protection Officer to align security controls with privacy obligations and regulatory requirements.
- Oversee global SOC operations including monitoring, detection, incident triage, & forensic investigations.
- Ensure advanced protection across Microsoft 365, Azure, Intune, Defender, Sentinel SIEM, Cloudflare, DNS, & on-prem environments.
- Lead the improvement of SIEM engineering, log ingestion, alerting, correlation, & automation.
- Ensure continuous protection of identity, endpoints, networks, & cloud services.
- Act as executive owner of the global Incident Response process.
- Lead major incidents, including ransomware, credential compromise, cloud intrusion, web security incidents, or DDoS events.
- Manage RCA, reporting, containment, & lessons-learned processes.
- Maintain, test, & improve incident response plans across UK & US operations.
- Own the global information security risk management framework & risk register.
- Lead all customer assurance & Due Diligence Questionnaire (DDQ) responses.
- Manage compliance with ISO 27001/27002, NIST CSF, SOC 2, CIS, DORA, CE/CE+ requirements.
- Oversee internal/external audits, ensuring evidence collection, remediation tracking, & executive reporting.
- Perform supplier & project risk assessments & approve controls for new systems & services.
- Own the global vulnerability lifecycle, including scanning, reporting, prioritisation, & validation.
- Manage annual penetration testing programmes, including remediation.
- Ensure ongoing alignment with industry baselines & benchmarks.
- Oversee privileged access reviews & secure configuration governance.
- Own & maintain the enterprise BCP & DR strategy & documentation.
- Ensure regular testing, validation, & continuous improvement across all regions.
- Work IT Op, Product / Tech, & business leaders to enhance resilience.
- Oversee secure configuration & governance of Azure, M365, identity, networking, servers, & firewalls.
- Ensure that new & existing applications undergo appropriate security assessment & review.
- Govern Cloudflare, WAF, bot management, DNS security, & zero trust implementations.
- Lead vendor security assessments & approve or reject high-risk suppliers.
- Ensure third-party SOC, compliance, & security requirements are met.
- Own the timely & accurate completion of customer security questionnaires, audits, & DDQs.
- Directly manage & develop the Information Security Lead
- Build strong relationships with all functional teams
- Promote & sustain a strong global “security-first” culture.
- Deliver ELT communication, training, & guidance across the organisation.
- Oversee global security awareness programmes, phishing simulations, & targeted training.
- Ensure consistent & high-quality communication across global teams.
Skills Knowledge and Expertise
Experience
- 7–10+ years of progressive experience in Information Security, Cyber Security, Governance, or similar.
- Experience leading a global or multi-region security function.
- Strong background in Microsoft cloud security, SOC operations, risk, compliance, & resilience.
- Demonstrated leadership in managing incidents, risk remediation, & security programmes.
- Experience managing or partnering with engineering, infrastructure, & cloud teams.
- ISO 27001/27002
- NIST CSF
- CIS Controls
- SOC 2
- Cyber Essentials / CE+
- DORA & financial/US regulatory frameworks (beneficial)
- GDPR & US privacy regulations (beneficial)
- Strong leadership with the ability to influence at executive level.
- Excellent communication skills across technical & non-technical groups.
- Clear, calm, & structured thinking under pressure.
- Ability to manage competing global priorities & drive results.
- CISSP, CISM, or CISA
- Microsoft SC-series (SC200, SC300, SC400)
- Azure Security Engineer (AZ500)
- GIAC, CEH, or similar
About Centellic
Centellic stands at the center of the markets it serves, empowering organizations with indispensable data and insight to make critical decisions on growth, risk and opportunity.
Through proprietary data, deep market expertise and AI-enabled technology, our platforms are embedded in client workflows. That capability is underpinned by our events, which bring the market together to share perspective and deepen understanding of the issues shaping each sector. Together, they give organizations earlier visibility of emerging trends, and the clarity and confidence to act when decisions matter.
At Centellic, we’re a global intelligence and information services business, setting the standard for how critical business decisions are made.
Why Centellic?
At Centellic, we help our clients make better decisions, and our people are at the heart of that work. Every individual plays an important role in this, bringing curiosity and high standards to everything they do.
Those who thrive here take ownership, care deeply about their work and are committed to excellence. Standards are high because our people set them that way. And while we have decades of expertise, we are still growing, pushing and building something extraordinary.
Centellic’s advantage is our people and the culture we’ve created together. It’s an environment where individuality is encouraged, relationships are genuine, and there’s a strong sense of purpose in what we’re building together. Collaborative, respectful and driven, we take our work seriously without taking ourselves too seriously.
Benefits
Our people are our most valuable asset, as such, we offer a wide range of benefits to help ensure that all are supported:
Start of employment:
- Eye care
- Employee Assistance Programme
- A day off for your birthday
After 3 months employment:
- Pension (4% employer contribution and 4% employee contribution)
After 4 months employment:
- Life assurance
After probation:
- Cycle to work scheme
- Season ticket loan
- £350 annual wellbeing allowance to contribute to gym memberships or fitness classes
- Puregym access
- Perks at work platform access
After 1 year service:
- Private healthcare
Additional Perks:
- Company socials
- Access to Employee Affinity Networks
- Mentoring scheme
- Volunteering Day
- Mortgage Advice
- Work from anywhere (2 weeks)
- Generous parental leave
We are committed to making our organisation an inclusive, respectful & engaging place to work with a culture shaped by our core values that promote equality, collaboration & respect in everything we do. We are proud to be part of the Disability Confident Scheme, meaning we are committed to being inclusive and accessible, which starts with our application and recruitment process. If you do require any reasonable adjustments to be made, please let us know as part of our application page.
‘We are proud to be an equal opportunities employer and are committed to ensuring that all candidates are given the same opportunity to succeed regardless of their sex, gender identity/expression or reassignment, sexual orientation, marital status, race, colour, nationality, ethnic or national origin, religion, age or disability.’
‘We are proud to be an equal opportunities employer and are committed to ensuring that all candidates are given the same opportunity to succeed regardless of their sex, gender identity/expression or reassignment, sexual orientation, marital status, race, colour, nationality, ethnic or national origin, religion, age or disability.’
About
Please visit our website for more information.
Law Business Research London, England Office
330 High Holborn, London, England, United Kingdom, WC1V 7QT
Similar Jobs
Cloud • Information Technology • Security • Software • Cybersecurity
Lead complex enterprise sales cycles across Central and Eastern Europe, acquiring new digital-native customers and expanding existing accounts. Develop territory plans, manage strategic pipelines, deliver accurate forecasts, exceed multimillion-dollar quotas, and negotiate large contracts. Understand customer IT architectures and align them with Cloudflare reference architectures. Lead virtual cross-functional teams, engage executive and technical stakeholders, position digital transformation solutions, and coach colleagues.
Top Skills:
Cloud NetworkingCloudflareCybersecurityEdge ComputingGoogle SuiteMeddpiccMicrosoft 365SalesforceTableau
Cloud • Information Technology • Security • Software • Cybersecurity
Own post-contract technical support for Cloudflare’s enterprise customers as their primary technical contact. Manage escalations, resolve support issues, provide proactive configuration and infrastructure guidance, conduct quarterly support reviews, coordinate incident response, and relay customer feedback to product and engineering teams. The role requires strong networking knowledge, customer leadership, cross-functional collaboration, and up to 25% travel, plus one weekend of work each quarter.
Top Skills:
BgpCloudflare ProductsCurlDdos ProtectionDigFirewallsGreIpsIpsecOsi ModelOspfProxy ServersTracerouteWireshark
Artificial Intelligence • Productivity • Sales • Software
Own the end-to-end recruiting lifecycle, partnering with hiring managers and business leaders to define needs, source candidates, manage requisitions, conduct interviews, and deliver an exceptional candidate experience. Develop sourcing channels, maintain talent pools, improve recruitment workflows through data-driven analysis, and support the company’s culture and hiring goals.
Top Skills:
Applicant Tracking Systems (Ats)Candidate Management Systems (Cms)
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
