Interim Chief Information Security Officer (CISO)
UK Civil Service – Digital Workplace Integration Programme

Role Overview

The Interim Chief Information Security Officer (CISO) will provide senior security leadership for a defined period, ensuring continuity, grip, and clear direction for the organisation’s security function.  Predominantly, this role will involve working at SECRET and therefore familiarity with typical security arrangements at that level will be an advantage.
The role will focus on rapidly assessing the current security posture, operating model, services, and priorities; maintaining effective governance and compliance; supporting secure product-centric delivery; and identifying practical improvements that strengthen protection of highly sensitive information assets.
Reporting to the Programme Director, the Interim CISO will work as part of the Leadership Team, engage with senior stakeholders and government security partners, support system accreditation, and prepare the security function for effective transition beyond the interim appointment.

Key Responsibilities

• Examine the current operating model, services, and operational processes to assess alignment with organisational priorities, good practice and appropriate prioritisation, making clear recommendations for improvement where required.
• Manage and develop a dedicated security team, fostering a culture of professionalism, continuous learning, and leadership in security practices, covering specialisms defined in the Government Security Profession.
• Represent the organisation at specialist HMG and industry forums, influencing policy and advocating for the protection of the critical information assets.
• Provide authoritative advice to senior stakeholders and security peers across partner organisations throughout the UK, and occasionally internationally, on cyber risk management, incident response, and emerging threats.
• Oversee the creation, implementation, and continuous improvement of security policies, standards, and procedures to safeguard highly sensitive information.
• Engage proactively with external partners, regulators, and cross-government security networks to promote best practices and facilitate intelligence sharing across the wider security community.
• Manage ongoing compliance with all relevant legislation, such as UK GDPR, and HM Government security standards.
• Lead coordinated planning and responses to major security incidents, working closely with partner organisations and national bodies to ensure effective communication and swift resolution.
• Champion a culture of security awareness and risk management not only within the organisation but also among partner entities.

Essential Criteria

• Executive Leadership: Accomplished experience in an executive security leadership role, demonstrating strategic impact and operational excellence in environments dealing with high-value or highly sensitive information.
• Substantial industry experience in a highly regulated environment, or within His Majesty’s Government (HMG), with deep understanding of the challenges in securing sensitive information assets.
• Stakeholder Engagement: Ability to communicate complex security issues effectively to senior stakeholders, security peers, and technical experts.
• Continuous Improvement: Proven commitment to driving innovation and excellence in security practices and organisational culture, with an emphasis on balancing security needs with useability and reducing user friction.
• Technical Mastery: Knowledge of security frameworks (e.g. ISO 27001, NIST, and/or NCSC guidance), security risk management, security architecture, and best practices for safeguarding sensitive assets.
• Regulatory Compliance: Familiarity with UK legislation, standards, and protocols.
• Incident Management: Demonstrable capability in managing complex security incidents.

Desirable Criteria

• Relevant professional certifications (such as CISSP, CISM, CISA, or equivalent).
• Experience of collaborating with a range of executive functions and multi-agency security operations.
• Established network within the UK cyber security community.
• Experience of major digital transformation and secure adoption of cloud or emerging technologies in a highly regulated sector.

Behaviours and Skills

• Forward-looking strategic vision, with the ability to anticipate and mitigate future risks to sensitive information assets.
• Strong leadership, influencing, and negotiation skills when working with senior stakeholders and peers across the UK and potentially internationally.
• Openness to innovation, drawing on best practices and creative approaches to achieve organisational objectives.
• Resilience and calm leadership under pressure, especially during incidents involving multiple stakeholder organisations.
• Commitment to diversity, inclusion, and the highest standards of ethical leadership.

Reporting and Accountability

The Interim CISO is accountable for providing senior security leadership during the fixed-term appointment, working flexibly and innovatively with senior colleagues, and ensuring the organisation’s security posture meets the expectations of ministers, the Cabinet Office, and other regulatory authorities. Rather than reporting to a traditional Board, this position engages and collaborates across a network of senior decision-makers and security professionals within partner organisations to drive national security objectives.

Contract Details

This position is offered as an interim appointment on a 12-month contract.

Location and Travel

The role is based in East London, with  travel required to Scotland and occasional travel elsewhere in the UK. International travel is unlikely but may be required as dictated by organisational needs.

Security Clearance

This post requires the successful candidate to hold active or obtain and maintain appropriate government security clearance to a minimum of SC level and must be willing to go through to DV level.