<h2 data-section-id="xbq4cp" data-end="330" data-start="260"><strong data-end="328" data-start="263">Information Security Programme Lead (Security Transformation)</strong></h2><p data-start="332" data-end="539">Robert Half are supporting a global consulting firm to source an experienced Information Security Programme Lead to join a critical Security Transformation programme within a complex, evolving environment.This is a senior, CISO-facing role focused on driving delivery, bringing structure, and realising value from existing security capabilities across people, process, and technology - not just deploying new tools.</p><h3 data-start="758" data-end="784" data-section-id="14fn9z"><strong data-start="762" data-end="784">Assignment Details</strong></h3><ul><li>Initial contract length: 6 months (likely extension)</li><li>Location: Leeds (2-3 days onsite per week)</li><li>Start date: ASAP (2-3 week onboarding)</li><li>Engagement: c. £600-£650 p/day via FCSA accredited umbrella company</li></ul><h3 data-end="1024" data-section-id="1cg918x" data-start="1003"><strong data-start="1007" data-end="1024">Role Overview</strong></h3><p data-start="1026" data-end="1200">You will take ownership of a broad, multi-stream Security Transformation programme, working directly with the CISO to drive delivery across a fragmented set of initiatives. The environment requires someone who can bring clarity, prioritisation, and momentum enabling security SMEs to focus on delivery rather than programme overhead. The focus is on maturing existing capabilities, improving adoption, and embedding sustainable operating models aligned to frameworks such as NIST.</p><h3 data-start="1521" data-end="1549" data-section-id="165gfiz"><strong data-start="1525" data-end="1549">Key Responsibilities</strong></h3><ul><li>Lead delivery of a multi-stream Information Security Transformation programme across multiple workstreams</li><li>Own and drive the Security Transformation Roadmap, ensuring clear prioritisation and delivery outcomes</li><li>Bring structure and pace to a complex environment, removing blockers and driving accountability across teams</li><li>Establish and run programme governance, reporting, and RAID management at senior stakeholder level</li><li>Coordinate delivery across key domains including IAM (SailPoint), PAM, DLP, and technology risk/control functions</li><li>Ensure security tools and controls are effectively implemented, optimised, and delivering measurable value</li><li>Embed NIST-aligned practices across Identify, Protect, Detect, Respond, Recover domains</li><li>Drive process and governance maturity, ensuring security services are operationalised and sustainable</li><li>Develop and track KPIs to measure security maturity, adoption, and risk reduction</li><li>Collaborate across Security Operations, GRC, Architecture, and IT to ensure alignment and integration</li><li>Manage dependencies, risks, and resource constraints across multiple delivery streams</li><li>Support and lead delivery teams, enabling effective execution across squads and stakeholders</li></ul><h3 data-start="2772" data-end="2799" data-section-id="1olrjqp"><strong data-end="2799" data-start="2776">Experience Required</strong></h3><ul><li>Proven experience leading Information Security or Security Transformation programmes in complex environments</li><li>Strong exposure across IAM (SailPoint), PAM, and broader security control domains</li><li>Experience working within or delivering against NIST or similar frameworks</li><li>Track record of driving delivery in less structured or evolving environments</li><li>Strong understanding of how to operationalise security capabilities across people, process, and technology</li><li>Experience managing multiple workstreams or delivery squads</li><li>Ability to operate confidently at CISO and senior stakeholder level</li><li>Strong stakeholder management with the ability to challenge, influence, and drive outcomes</li></ul><h3 data-section-id="xl9znq" data-end="3526" data-start="3492"><strong data-end="3526" data-start="3496">Qualifications (Desirable)</strong></h3><ul><li>CISSP, CISM, CRISC or similar</li><li>Agile / Delivery certifications (SAFe, Scrum, Prince2, PMP)</li><li>Cloud or security certifications (Azure, AWS, Microsoft Security, Identity platforms)</li></ul><h3 data-end="3746" data-section-id="o20c5v" data-start="3716"><strong data-start="3720" data-end="3746">Additional Information </strong>If successful, you will be required to complete standard financial and criminal background checks, along with references.</h3><p>Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to diversity, equity and inclusion. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data: roberthalf.com/gb/en/privacy-notice.</p><img src="https://counter.adcourier.com/Tmljb2xhcy5HZW9yZ2lvdS4zMjk4NC4xMDkyM0ByaGkuYXBsaXRyYWsuY29t.gif">

cyber security programme lead