Chief Information Security Officer

Job summary

Chief Information Security Officer

Salary: £75,055 - £82,400 plus a location allowance of £1,750 and excellent benefits
Location: Based in Hanslope Park, Milton Keynes with the flexibility of hybrid working depending on business need
Free shuttle bus is available between central Milton Keynes and Hanslope Park

At FCDO Services we protect the UK’s interests at home and overseas. We design and construct secure government buildings and courier diplomatic packages worldwide, safeguard government tech and a whole lot more. Our work is as varied and vital as it gets, but we never lose sight of our people. Their skills, aspirations and growth mean as much as the global mission we’re on. In our world, it all matters.

Job description

Our Digital, Data and Technology team are at the forefront of digital innovation. They provide best-in-class solutions for our clients, helping to shape and support a data driven future for UK government. Whether it’s creating bespoke, secure software, offering programme and application support or moving an entire embassy’s servers to a Cloud platform. No matter the task, they are on hand to support. Now, you’ve got the opportunity to join them.

Providing innovation to government partners.
Delivering best-in-class solutions.
Working at the cutting-edge of technology
It all matters.

Drive operational security and digital transformation

As Chief Information Security Officer, you’ll provide strategic leadership for information and cyber security across FCDO Services. You’ll ensure that security objectives support organisational priorities, enable digital transformation and strengthen operational resilience.
Playing a key role in developing and communicating FCDO Services’ Information Security and Cyber Assurance Vision and Strategy, you’ll bring different teams together to establish shared direction for delivering this new strategy. Leading our Information and Cyber Security functions, you’ll ensure we develop, maintain and continually improve a comprehensive, risk-based security capability that protects the confidentiality, integrity and availability of information, systems and services. Covering both project and service delivery and live-service security monitoring, you’ll own cyber and information security risk across the organisation – promoting governance and assurance as an enabling approach. Enabling FCDO Services to innovate safely and securely, you’ll create and own the delivery of Information Security initiatives to ensure the organisation and its products are capable of protection against the latest vulnerabilities and cyber threats.

Extend your expertise, working to defend the UK’s global interests

To succeed in this role, you should be able to drive cyber and information security and assurance across a variety of business areas, projects and programmes. You’ll bring a broad range of experience gained in a Deputy CISO, Head of Cyber Security or equivalent role. This could include working in incident response, SOC, security architecture, vulnerability and compliance, governance or risk. Preferably, you’ll have experience of working in both the public and private sectors, but this isn’t essential. You’ll also bring significant technical experience in cloud and mobile technologies and enterprise level architectures, along with knowledge of how different products and services may impact business security risks. As well as working with different technical teams to deliver complex solutions, you should be able to translate cyber and information security issues into meaningful language for non-specialist audiences across the business. You should also have a professional qualification such as CISSP, NCSC Certified Professional or Level 6 equivalent qualification, or a Certified CISO qualification like CISA, CISM or CRISC.

Discover the support you need to grow your career further

Working with us you’ll help keep people, information, and assets safe around the world. It’s a role you can feel proud of; and we aim to make every part of your career just as rewarding. That’s why when you join us, expect to receive a competitive salary, good holiday entitlement and a Civil Service Pension. Along with this, you’ll also have access to training and other development opportunities to help grow your career with us. Our offices have an on-site gym, nursery, café, and restaurant, and we offer interest-free loans on season tickets and bikes to help you get there. It's a great set of benefits made to support all you do, and all you need.

Want to see your future team’s work in action? Step into our Virtual Embassy and select a guide to take you round to see how we deliver for government customers and how you could help. Explore the embassy now at virtual-embassy.fcdoservicescareers.co.uk

Every single colleague must be security cleared before joining us. If you’re successful in your application, we’ll ask you to undergo our vetting process to achieve Developed Vetting (DV) clearance. You can find out more about vetting on our website: https://www.fcdoservicescareers.co.uk/how-to-apply/

To find out more about our benefits and our organisation, please visit fcdoservicescareers.co.uk

Closing date: 18th October 2026

It takes a diverse team to protect a diverse world

The vital work we do takes an incredible community of colleagues, with different skills, backgrounds, cultures and identities. We support every individual, so that you always know you’re welcome and valued. It’s what makes us a Disability Confident employer. And why we’re recognised as a ‘Carer Confident’ workplace. And it’s how you know you’re joining an inspiring, inclusive organisation.

Person specification

Essential:

Expert level of competency in: (The full criteria for the competencies are included in an extract from the Government Security Profession, provided in a separate document.)

o Applied Security Capability

o Cyber Security Operations

o Incident Management, Incident Investigation and Response

o Information Risk Assessment and Risk Management

o Risk Understanding and Mitigation

o Security Architecture:

o Threat Intelligence and Threat Assessment

o Threat Understanding

• Able to directly brief the Board and Executive team on all matters pertaining to information security and cyber operations.
• Track record of driving information security, information assurance and cyber security at the strategic level across a broad range of business areas, projects and programmes delivering complex solutions, substantial business change, influencing enterprise level architectural designs in terms of direction and change.
• Significant technical experience in enterprise level architectures, cloud and mobile technologies, a wide knowledge of products and services and how these may impact business security risks.
• Demonstrable substantial combined experience in information security and information risk management frameworks,
• Appropriate professional qualification in relevant discipline, e.g. CISSP, NCSC Certified Professional or level 6 equivalent qualification, Certified CISO qualification, e.g. CISA, CISM, CRISC.
• Experience managing supply chain risks within Government.
• Experience implementing / maintaining ISO27001 compliance or certification at an enterprise level, or other equivalent/ similar information security and assurance governance standards

Qualifications

Appropriate professional qualification in relevant discipline, e.g. CISSP, NCSC Certified Professional or level 6 equivalent qualificati