Description About Us The Guinness Partnership is one of the leading providers of social housing and care services in England. We build and manage homes and provide housing services to around 140,000 customers nationwide. Of our 70,000 homes, more than 70% are let at a social or affordable rent, while around 10,000 are owned or part-owned by the people who live in them. Our vision is to deliver great service, provide great homes, to be a great business and to be a great place to work. Because everything we do is about our customers, our communities and our people, any profit we make is re-invested in new and existing homes and improving services. About the role We have an exciting opportunity for a Head of Cyber Security to join the Guinness Team. This is a permanent, full-time vacancy based in our Oldham, Bower House, office, we are currently working to a hybrid working style. This is a newly created role in our IT and Business Change senior management team. In this role you will provide the primary focus and overarching management of the cyber security strategy, plans, risk, policies, and assurance activities across Guinness. You’ll work alongside our technical teams in IT, and cross functionally to establish and maintain the security governance framework, ensuring all key stakeholders have visibility of security posture and performance against the delivery roadmap. Your work will drive a steady increase in cyber security maturity across our business by providing a visible security partnering function, and you will ensure consistency in how cyber risk is managed through effective implementation of strategy, policies, risk processes, incident response and assurance activities. What we’re looking for We know that how we do things is just as important as what we do. You will be a highly self-motivated leader with the rigour to pursue goals, and you’ll be a confident and tenacious collaborator, communicator, and relationship builder with a willingness to go the extra mile to get the job done. You’ll be able to demonstrate: Essential: Strong track record in cyber security leadership, strategy development and planning; skills in applying and championing protective security concepts and controls. Proven expertise in security governance and risk management methodologies and leveraging best practice. Ability to develop a cost-effective approach to risk management, informed by an understanding of corporate governance, strategic direction, and business drivers. Experience with regulatory compliance and standards eg NCSC CAF, ISO27001, PCI, GDPR and other security compliance standards. Experience of Managing Cyber Security Incidents including the coordination, response, mitigation, impact, and lessons learnt. Solid understanding and applicable knowledge of technical security concepts across different security domains. Strong interpersonal and negotiating skills, with the ability to engage and influence at all levels internally and externally. Financial and commercial understanding acquired through budget, supplier, and relationship management. Broad business knowledge, including understanding technology ‘end to end’ process operation. Demonstrates the Guinness Behaviours. Demonstrates the Guinness Leadership and Management Standard. Desirable: Understanding context of social housing. Experience of working with regulatory bodies. Qualifications Essential: CISM and/or CISSP certified or equivalent IT security / governance accreditation. Desirable: Educated to Level 6 (degree level in an IT/IM related discipline) or equivalent. Salary Range: Salary ranging from £88,992 - £101,718 per annum, dependant on experience. If you’re interested in finding out more about the key responsibilities of the role, please review the role profile. INDTGP TJTGP