Head of Cyber Security

West Kirby Source: WhatJobs

£120,000–£180,000

About Matalan

From humble beginnings to disruptive innovations in the retail industry, find out about how Matalan is ever-evolving here.

We know as a team, we are stronger together - we champion equality for all and make lasting connections that go beyond work. We thrive off our inclusive culture, encouraging our colleagues to bring their true selves to work and contributing to collective creativity, open-mindedness and growth.

We want give every candidate the opportunity to perform at their best throughout the application and interview process and then ultimately in their role. If you require any adjustments during our recruitment process, please don't hesitate to let us know.

In the event that a high volume of suitable applications are received, the post may close prior to the specified closing date.

About the role

The Head of Cyber Security / CISO is accountable for leading Matalan's cyber security strategy, governance, risk management and operational resilience at a senior, non-board level. The role provides dedicated ownership of cyber risk, security architecture, incident readiness, supplier security and continuous improvement, ensuring cyber security priorities are translated into clear business outcomes, measurable risk reduction and effective protection of Matalan's customers, colleagues, data and critical services.

Key Responsibilities

Lead and develop Matalan's internal cyber security capability, ensuring the right skills, succession plans and accountabilities are in place across cyber governance, architecture, delivery and continuous improvement
Provide senior cyber security leadership and advice to the Director of IT, Executive team and relevant governance forums, translating technical risk into clear business impact and decision options
Lead the performance management of cyber security contractors, managed service partners and specialist third parties, ensuring clear ownership, challenge and delivery against agreed outcomes

Cyber Strategy, Governance and Risk Management

Own and maintain Matalan's cyber security strategy and roadmap, ensuring priorities are risk-led, business aligned and focused on measurable improvements in resilience and recovery
Establish and embed cyber governance, risk and compliance processes, including policies, standards, risk appetite, risk assessment, control assurance and reporting
Maintain a transparent view of cyber threats, vulnerabilities, control gaps and enterprise cyber risks, ensuring decisions are prioritised using business impact and agreed risk appetite
Lead cyber security reporting for IT leadership, Executive forums and relevant governance groups, providing clear insight on risk posture, progress, investment choices and residual risk

Security Architecture, Operations and Incident Readiness

Ensure cyber security is embedded into technology strategy, architecture, change delivery and supplier solutions from the outset, reducing risk and rework
Oversee security operations, monitoring, vulnerability management, identity security, endpoint controls, network security and logging improvements delivered through internal teams and managed service partners
Own cyber incident readiness and response leadership, including incident response plans, rehearsals, CIRT mobilisation, technical response coordination and lessons learned
Drive continuous improvement of cyber controls, ensuring audit findings, incident lessons, maturity assessments and threat intelligence translate into prioritised action

Supplier and Third-Party Cyber Risk

Establish and oversee third-party cyber risk management, ensuring critical suppliers, SaaS providers and technology partners are assessed, governed and monitored proportionately to risk
Work with Procurement, Legal, Vendor Management and business owners to embed cyber security obligations into supplier onboarding, contracts, assurance activity and incident escalation routes

About You

Senior cyber security leadership experience in a complex, business-critical technology environment, ideally across retail, ecommerce, logistics or similarly operational environments
Strong understanding of cyber governance, risk management, compliance, incident response, security architecture, vulnerability management, identity and access, supplier risk and security operations
Experience translating technical cyber risks into clear business impact, investment choices and executive-level decisions
Experience leading internal teams, managed security partners, contractors and specialist cyber suppliers through clear outcomes, governance and performance management
Relevant cyber security qualifications or equivalent experience are desirable, such as NCSC CAF, NIST, DORA or related security risk frameworks