Head of Information Security

Are you a seasoned expert in safeguarding businesses from cyber risks? We’re looking for a strategic leader to take charge as our Head of Information Security & Business Continuity.

In this pivotal role, you will be the driving force behind Bede’s Information Security, Business Continuity, and Crisis Management strategy. You’ll own and deliver a comprehensive programme designed to identify, manage, and reduce cyber risks across our organisation. Your expertise will ensure that we not only meet but exceed legal, regulatory, and compliance requirements.

This is an opportunity to make a significant impact by creating a secure and resilient environment for our business, our people, and our customers. If you’re passionate about leading in a fast-paced and evolving landscape, we want to hear from you.

This is a hybrid role that requires you to be in our Newcastle-upon-Tyne office two days a week. Please apply only if you’re comfortable with this arrangement.

What you'll be doing

Ensure Bede’s technology and brand are protected through proactive and reactive strategies that secure our products and reputation. Develop, lead, and implement a comprehensive security and business continuity strategy and roadmap, aligned with broader business objectives. Build, lead, and develop a confident, competent, and resilient information security team. Oversee the implementation and rollout of security tools and frameworks to enhance our security posture. Implement and manage operational resilience across the business to ensure continuous and secure operations. Ensure business impact assessments are created, maintained, and updated across the organisation to mitigate potential risks. Identify, track, analyse, and remediate cyber risks across the business to protect against potential threats. Provide secure and compliant software applications throughout all areas of the business. Identify and manage key business stakeholders, partnering with them to address security requirements and mitigate threats to the business. Lead the implementation and maintenance of the Information Security Management System (ISMS). Ensure the implementation and maintenance of all relevant security legal, regulatory, and compliance frameworks. Act as the senior stakeholder and representative for all matters related to security and business continuity with our clients. Ensure Bede has a practical, fit-for-purpose business continuity plan that is well-known and understood across the business. Ensure that appropriate monitoring controls are in place to identify, protect, and detect threats. Maintain a comprehensive library of all assets with clearly assigned ownership. Partner with the People Team to promote continuous security learning and awareness across the organisation. Protect the business from current and emerging threats, staying ahead of industry trends and cyber security developments. Stay up to date with the latest industry intelligence and cyber security trends to keep Bede secure. Undertake any other responsibilities that are deemed reasonable and relevant to the role.

What we are looking for

Demonstrable experience in a senior Information Security role, with a track record of success in managing and leading security initiatives. Relevant security management qualifications such as CISSP or CISM. ISO27001 Lead Auditor or Implementer qualification, with experience in applying this knowledge effectively. Proven experience in leading a team, with a deep understanding of the essential leadership qualities required to excel in a senior role. Strong communication skills, with the ability to influence and engage effectively at the executive level. Exceptional writing skills, with experience in authoring and reviewing policy documentation. Experience in defending large-scale internet properties against distributed brute force attacks, DDoS, and OWASP Top 10 threats. High-level technical understanding of essential internet concepts such as HTTP, SSL, TCP networks, and OAuth. Solid understanding of cloud computing concepts and the ability to manage security at scale. Familiarity with Zero Trust and DevSecOps principles, with an understanding of the benefits they bring to a secure environment.

What We Can Offer You

Here at Bede, we offer a great benefits package and a competitive salary as you would expect from a forward-thinking and people-centric organisation. What sets us apart is our desire to look after our people in the best way we can and to ensure we are offering the best to our colleagues by asking for feedback, so you’ll be pleased to know our benefits package is always being reviewed.

A friendly, flexible and trust-based approach to working 25 days annual leave, plus 8 bank holidays and a typically very generous Christmas break The use of a mobile phone or tablet of your choice, with the monthly contract covered by us ‘Select Enhanced’ Bupa private healthcare – access from day 1 which covers all pre-existing conditions Fully matched private pension scheme (up to 8% matched) Life Assurance which pays out x4 of your salary to a nominated person(s) Employee Assistance Programme – Beders have access to support and practical advice on a variety of issues that might impact their life (provided by Bupa) Innovation time – Engineers have regular opportunities to spend time developing skills and innovating. A great office life! Free snacks and refreshments in the office every day as well as regular food van visits from the best places in Newcastle Access to Calm – the #1 app for meditation and sleep Lots of social events – inside and outside of the working day Referral Programme – help us grow our team with talented individuals and be rewarded with a referral payment of £3,000 (pre-tax) Bede swag – from Zoodies to t-shirts and even our much loved Bede socks! Bede Holidays – extra discretionary days off through the year as an extra special thank you