Chief Information Security Officer (CISO) - Local Authority - London - 4 Months
Posted 2 weeks ago by Allen Lane Ltd.
£750 Per day
Inside
Hybrid
London, UK
Summary: The Chief Information Security Officer (CISO) role at a leading London council involves providing strategic leadership and direction in cyber security and information governance within a politically sensitive, multi-organisation environment. This senior position is critical for enhancing organisational resilience and ensuring compliance while enabling effective digital transformation. The role is initially for a duration of four months, replacing an exiting member of the organisation.
Key Responsibilities:
- Develop and own the council's cyber security and information governance strategy, roadmaps, and multi-year improvement plans.
- Provide clear executive assurance on cyber posture, risk, compliance, and IG health.
- Lead the continual improvement of resilience across a diverse public sector ecosystem.
- Work confidently with a wide range of stakeholders including operational teams, senior officers, directors, C-suite leaders, and elected members.
- Communicate complex cyber and technical risks in clear, non-technical language.
- Offer evidence-based advice in politically sensitive settings, supporting informed decision-making.
- Produce high-quality board, committee, and councillor-facing reporting.
- Present formal papers, options appraisals, and recommendations to senior governance forums.
- Ensure sound and transparent risk-management practices.
- Engage with national bodies such as the NCSC, SOC/IOC partners, and other public sector organisations.
- Build strong relationships with peer authorities, shared service partners, and key suppliers.
- Lead coordinated responses to major cyber incidents, including multi-party scenarios.
- Provide confident challenge to architects, engineers, and suppliers.
- Ensure secure-by-design is embedded into all major transformation programmes.
- Guide technical decision-making and provide senior assurance on architecture, risk, and delivery quality.
- Shape technology roadmaps that materially improve organisational cyber resilience.
Key Skills:
- Proven experience within the public sector (local government, shared services, NHS, central government, or similar).
- Strong understanding of statutory obligations, public accountability, and information governance frameworks.
- Experience operating across multi-organisation or shared service environments with varied cyber maturity.
- A credible, calm, authoritative leader with excellent communication skills.
- Pragmatic and risk-based, aligned to public sector values and service enablement.
- Comfortable operating independently while maintaining strong executive relationships.
Salary (Rate): £750 daily
City: London
Country: UK
Working Arrangements: hybrid
IR35 Status: inside IR35
Seniority Level: Senior
Industry: IT
Chief Information Security Officer (CISO) - London Council - Shared Services Environment - 4 Months 1 £750pd
A leading London council is seeking an experienced Chief Information Security Officer (CISO) to provide strategic leadership, assurance, and direction across all aspects of cyber security and information governance. This is a senior, high-impact role operating within a politically sensitive, multi-organisation environment, where services, systems, and partners span a broad and complex landscape. You will play a critical part in enhancing organisational resilience, ensuring compliance, and enabling safe, effective digital transformation. This role is to replace an exiting member of the organisation so will be for 4-months initially.
Key Responsibilities:
Strategic Leadership & Assurance
- Develop and own the council's cyber security and information governance strategy, roadmaps, and multi-year improvement plans.
- Provide clear executive assurance on cyber posture, risk, compliance, and IG health.
- Lead the continual improvement of resilience across a diverse public sector ecosystem.
Stakeholder & Political Engagement
- Work confidently with a wide range of stakeholders including operational teams, senior officers, directors, C-suite leaders, and elected members.
- Communicate complex cyber and technical risks in clear, non-technical language.
- Offer evidence-based advice in politically sensitive settings, supporting informed decision-making.
Governance, Reporting & Committees
- Produce high-quality board, committee, and councillor-facing reporting.
- Present formal papers, options appraisals, and recommendations to senior governance forums.
- Ensure sound and transparent risk-management practices.
External Collaboration & Incident Response
- Engage with national bodies such as the NCSC, SOC/IOC partners, and other public sector organisations.
- Build strong relationships with peer authorities, shared service partners, and key suppliers.
- Lead coordinated responses to major cyber incidents, including multi-party scenarios.
Technical Credibility & Delivery
Although this isn't a hands-on engineering role, we're looking for a CISO with the technical depth and credibility to influence major programmes and drive meaningful uplift to the council's cyber-security posture.
You'll bring experience in leading delivery of:
- Identity & Access Management (IAM) - including MFA, PAM, and identity governance.
- Network security and segmentation across hybrid or multi-site environments.
- Endpoint, cloud, and zero-trust architectures, improving protection and reducing attack surface.
- Security monitoring and incident response, including maturing SOC capability.
Your role will be to:
- Provide confident challenge to architects, engineers, and suppliers.
- Ensure secure-by-design is Embedded into all major transformation programmes.
- Guide technical decision-making and provide senior assurance on architecture, risk, and delivery quality.
- Shape technology roadmaps that materially improve organisational cyber resilience.
This role suits someone who is not hands-on day-to-day, but has the authority, experience, and insight to lead complex technical change from the top.
Essential Background
Candidates must demonstrate:
- Proven experience within the public sector (local government, shared services, NHS, central government, or similar). Local govt preferred.
- Strong understanding of statutory obligations, public accountability, and information governance frameworks.
- Experience operating across multi-organisation or shared service environments with varied cyber maturity.
Personal Attributes
The ideal candidate will be:
- A credible, calm, authoritative leader with excellent communication skills.
- Pragmatic and risk-based, aligned to public sector values and service enablement.
- Comfortable operating independently while maintaining strong executive relationships
TL;DR
Start: ASAP
Location: London (hybrid working)
Duration: 4 months
Daily Rate: £750
IR35 Status: Inside IR35