Chief Information Security Officer

Job summary

• Chief Information Security Officer
• Salary: £75,055 - £82,400 plus a location allowance of £1,750 and excellent benefits
• Location: Based in Hanslope Park, Milton Keynes with the flexibility of hybrid working depending on business need
• Free shuttle bus is available between central Milton Keynes and Hanslope Park

At FCDO Services we protect the UK’s interests at home and overseas. We design and construct secure government buildings and courier diplomatic packages worldwide, safeguard government tech and a whole lot more. Our work is as varied and vital as it gets, but we never lose sight of our people. Their skills, aspirations and growth mean as much as the global mission we’re on. In our world, it all matters.

Job description

Our Digital, Data and Technology team are at the forefront of digital innovation. They provide best-in-class solutions for our clients, helping to shape and support a data driven future for UK government. Whether it’s creating bespoke, secure software, offering programme and application support or moving an entire embassy’s servers to a Cloud platform. No matter the task, they are on hand to support. Now, you’ve got the opportunity to join them.

Providing innovation to government partners.

Delivering best-in-class solutions.

Working at the cutting-edge of technology

It all matters .

Drive operational security and digital transformation

As Chief Information Security Officer, you’ll provide strategic leadership for information and cyber security across FCDO Services. You’ll ensure that security objectives support organisational priorities, enable digital transformation and strengthen operational resilience.

Playing a key role in developing and communicating FCDO Services’ Information Security and Cyber Assurance Vision and Strategy, you’ll bring different teams together to establish shared direction for delivering this new strategy. Leading our Information and Cyber Security functions, you’ll ensure we develop, maintain and continually improve a comprehensive, risk-based security capability that protects the confidentiality, integrity and availability of information, systems and services. Covering both project and service delivery and live-service security monitoring, you’ll own cyber and information security risk across the organisation – promoting governance and assurance as an enabling approach. Enabling FCDO Services to innovate safely and securely, you’ll create and own the delivery of Information Security initiatives to ensure the organisation and its products are capable of protection against the latest vulnerabilities and cyber threats.

Extend your expertise, working to defend the UK’s global interests

To succeed in this role, you should be able to drive cyber and information security and assurance across a variety of business areas, projects and programmes. You’ll bring a broad range of experience gained in a Deputy CISO, Head of Cyber Security or equivalent role. This could include working in incident response, SOC, security architecture, vulnerability and compliance, governance or risk. Preferably, you’ll have experience of working in both the public and private sectors, but this isn’t essential. You’ll also bring significant technical experience in cloud and mobile technologies and enterprise level architectures, along with knowledge of how different products and services may impact business security risks. As well as working with different technical teams to deliver complex solutions, you should be able to translate cyber and information security issues into meaningful language for non-specialist audiences across the business. You should also have a professional qualification such as CISSP, NCSC Certified Professional or Level 6 equivalent qualification, or a Certified CISO qualification like CISA, CISM or CRISC.

Discover the support you need to grow your career further

Working with us you’ll help keep people, information, and assets safe around the world. It’s a role you can feel proud of; and we aim to make every part of your career just as rewarding. That’s why when you join us, expect to receive a competitive salary, good holiday entitlement and a Civil Service Pension. Along with this, you’ll also have access to training and other development opportunities to help grow your career with us. Our offices have an on-site gym, nursery, café, and restaurant, and we offer interest-free loans on season tickets and bikes to help you get there. It's a great set of benefits made to support all you do, and all you need.

Want to see your future team’s work in action? Step into our Virtual Embassy and select a guide to take you round to see how we deliver for government customers and how you could help. Explore the embassy now at virtual-embassy.fcdoservicescareers.co.uk

Every single colleague must be security cleared before joining us. If you’re successful in your application, we’ll ask you to undergo our vetting process to achieve Developed Vetting (DV) clearance. You can find out more about vetting on our website: https://www.fcdoservicescareers.co.uk/how-to-apply/

• To find out more about our benefits and our organisation, please visit fcdoservicescareers.co.uk
• Closing date: 18th October 2026
• It takes a diverse team to protect a diverse world

The vital work we do takes an incredible community of colleagues, with different skills, backgrounds, cultures and identities. We support every individual, so that you always know you’re welcome and valued. It’s what makes us a Disability Confident employer. And why we’re recognised as a ‘Carer Confident’ workplace. And it’s how you know you’re joining an inspiring, inclusive organisation.

Person specification

Essential:

Expert level of competency in: (The full criteria for the competencies are included in an extract from the Government Security Profession, provided in a separate document.)

• o Applied Security Capability
• o Cyber Security Operations
• o Incident Management, Incident Investigation and Response
• o Information Risk Assessment and Risk Management
• o Risk Understanding and Mitigation

o Security Architecture:

o Threat Intelligence and Threat Assessment

o Threat Understanding

• Able to directly brief the Board and Executive team on all matters pertaining to information security and cyber operations.
• Track record of driving information security, information assurance and cyber security at the strategic level across a broad range of business areas, projects and programmes delivering complex solutions, substantial business change, influencing enterprise level architectural designs in terms of direction and change.
• Significant technical experience in enterprise level architectures, cloud and mobile technologies, a wide knowledge of products and services and how these may impact business security risks.
• Demonstrable substantial combined experience in information security and information risk management frameworks,
• Appropriate professional qualification in relevant discipline, e.g. CISSP, NCSC Certified Professional or level 6 equivalent qualification, Certified CISO qualification, e.g. CISA, CISM, CRISC.
• Experience managing supply chain risks within Government.
• Experience implementing / maintaining ISO27001 compliance or certification at an enterprise level, or other equivalent/ similar information security and assurance governance standards

Qualifications

Appropriate professional qualification in relevant discipline, e.g. CISSP, NCSC Certified Professional or level 6 equivalent qualification, Certified CISO qualification, e.g. CISA, CISM, CRISC

Behaviours

We'll assess you against these behaviours during the selection process:

• Making Effective Decisions
• Seeing the Big Picture
• Communicating and Influencing

Technical skills

We'll assess you against these technical skills during the selection process:

• Track record of driving information security, information assurance and cyber security at the strategic level across a broad range of business areas, projects and programmes.
• Demonstrable substantial combined experience in information security and information risk management frameworks
• Experience implementing / maintaining ISO27001 compliance or certification at an enterprise level, or other equivalent/similar information security and assurance governance standards
• Appropriate professional qualification in relevant discipline, e.g. CISSP, NCSC Certified Professional or level 6 equivalent qualification, Certified CISO qualification, e.g. CISA, CISM, CRISC

Benefits

Alongside your salary of £75,055, FCDO Services contributes

£21,743 towards you being a member of the Civil Service Defined Benefit Pension scheme.

Find out what benefits a Civil Service Pension provides (opens in a new window).

• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension
• A leave allowance of 25 days per annum
• 9 days per annum public and privilege days

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window) , and will assess your Behaviours, Experience and Technical skills.

To apply for this role, you will be asked to provide your CV, a personal statement, and provide answers to some job specific/technical skills.

Your CV and personal statement will not form part of the assessment they will provide an insight into your work history and experience.

Your CV should include:

• no personal identifying details
• career history with key responsibilities
• achievements
• qualifications

Your personal statement should outline your interest in the role.

Candidates will only be sifted on answers provided to the technical/ job specific questions which are outlined in the application form.

Those that are successful will be invited to a Face to face interview.

At the interview you will be asked a blend of questions on technical/job specific skills and behaviours.

The candidate will need to complete a presentation along with the interview questions.

Candidates who are judged to be close to meeting the criteria may be considered for other positions in FCDO Services which may be at a lower grade, but have a potential skills match.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is developed vetting (opens in a new window) .

See our vetting charter (opens in a new window) .

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Medical

Successful candidates will be expected to have a medical.

Nationality requirements

Open to UK nationals only.

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window) .

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also