Cadent Gas Ltd Job Purpose As a Head of Security ,we are looking for someone who can develop and implement a comprehensive security strategy encompassing information, cyber, operational, and physical security, aligned with organizational and regulatory requirements. The hired person will advise senior leaders on mitigating security risks, foster innovation within a secure environment, and drive the security strategy to ensure focus, excellence, and functional value. Additionally, they will serve as an inspirational leader, exceeding service delivery expectations, establish a compliant framework that meets regulatory and statutory requirements, and promote a culture of health and safety. The role also includes enhancing security maturity across all areas, including information, cyber, physical, and personal security. Key Responsibilities Work with Transformational programme team to ensure the successful delivery of the security programme. Providing security services across Cadent, interfacing to the overall IT department Promote, implement, and maintain the Cyber Security Strategy, including policy and standards framework, and conduct information security risk analysis and management. Coordinate security efforts across Cadent, act as the central point of contact for cyber security advice, and undertake security audits. Enhance cyber security awareness among employees, manage NIS compliance documentation, report incidents, and facilitate communication with regulators. Relevant interfaces at regulatory bodies including DESNZ and Ofgem to ensure alignment with Cyber Security requirements. Skills and Experience CISSP / CSX-P certified with extensive knowledge of cybersecurity frameworks and standards, including ISO 27001, 1779, BS 7799, NIST Cybersecurity Framework, NIS, and CAF regulations. Proven success in defining and delivering a Cyber Security strategy in a large, complex organization with a mix of legacy and new technology. Significant experience in information and physical security, with a track record of liaising at all business levels. Understanding of access control systems, penetration testing, vulnerability management, operational technology security, physical security, and personal security