What are the responsibilities and job description for the Head of IT Security position at BlackFern Recruitment?
Job Details
Head of Security Information & Operational Technology
We are seeking a Head of Security to lead our enterprise-wide cybersecurity strategy, ensuring the protection of digital assets, intellectual property, and operational technologies (OT).
This role will drive security governance, risk management, compliance, and incident response, working closely with IT, Operations, and Legal teams to maintain a best-in-class security posture.
Key Responsibilities
- Develop and implement a comprehensive information security strategy aligned with business objectives.
- Establish and enforce security policies, procedures, and standards to meet industry regulations.
- Advise the CIO and executive leadership on cybersecurity risks, compliance, and security program effectiveness.
- Oversee risk management frameworks (ISO 27001, NIST) and ensure regulatory compliance (GDPR, HIPAA, CCPA).
- Lead security initiatives for OT and Industrial Control Systems (ICS) used in manufacturing processes.
- Ensure secure access control to physical locations via camera monitoring, badges, and digital access systems.
- Conduct regular risk assessments and vulnerability analyses to identify security threats.
- Lead incident response efforts, including investigation, containment, and remediation.
- Perform root cause analysis on security incidents and implement corrective actions.
- Assess and manage the security of third-party vendors and service providers.
- Negotiate security requirements in contracts and service level agreements (SLAs).
- Coordinate with legal and compliance teams to address regulatory requirements.
- Develop and deliver security awareness training programs for employees.
- Stay current with emerging cybersecurity threats, technologies, and regulatory changes.
- Report security initiatives, risks, and compliance status to the executive team and board of directors.
- Bachelor s degree in Computer Science, Information Technology, or Cybersecurity (Master s or certifications such as CISSP, CISM preferred).
- 10 years of experience in information security, with 5 years in leadership roles.
- Proven experience securing OT & ICS environments in manufacturing.
- Strong knowledge of security frameworks (NIST, ISO 27001) and regulatory requirements.
- Expertise in risk management, incident response, and vulnerability management.
- Excellent leadership, communication, and stakeholder management skills.
