Chief Information Security Officer (CISO) and Head of Corporate Security and Resilience

The Independent Football Regulator (IFR)

The Independent Football Regulator (IFR) has been established to protect and promote the sustainability of English football, for the benefit of fans and the local communities football clubs serve.

About The Role

This role provides strategic leadership and operational ownership of cyber security across the IFR, a small but high‑profile organisation. You will be responsible for developing, embedding and maturing a robust, proportionate cyber security and broader organisational security framework that protects the organisation’s people, data, systems and services.

Responsibilities

• Develop and lead the organisation’s cyber security strategy, governance, resilience and assurance activity.
• Oversee all aspects of cyber security operations, including incident response, threat monitoring, vulnerability management and security operations.
• Own the wider organisational security framework, including physical security, information governance, data protection and resilience planning.
• Set clear security management expectations and embed a strong, resilient and effective security awareness culture across a small but high‑profile organisation.
• Ensure compliance with relevant legislation, regulatory requirements and government security standards, including Government Functional Standard GovS 007: Security.
• Provide authoritative advice to the CEO, COO, CDDO, ExCo and Board on emerging threats, risks and mitigations.
• Implement a formal cyber exercising and incident response programme; drive security and operational resilience.
• Embed secure‑by‑design principles across digital services, data platforms and operational processes.
• Ensure the cyber security framework aligns with the regulator’s digital and data roadmap.
• Establish ambitious and effective cyber maturity credentials; lead on assurance, penetration testing, risk assessments and audit readiness.
• Implement audit recommendations and ensure timely remediation of identified risks.
• Oversee identity and access management, cloud security and supplier assurance.

Essential Requirements

• Significant experience operating effectively in cyber security leadership roles.
• Extensive knowledge of cyber risk management, governance and assurance frameworks including NCSC guidance, ISO 27001, Cyber Essentials Plus and NIST frameworks.
• Strong understanding of data protection, privacy and information governance.
• Proven experience managing security operations, incident response and threat intelligence.
• Ability to oversee supplier risk and ensure robust third‑party assurance.
• Experience driving measurable security improvements.
• Experience leading cyber incidents, including response coordination and exercising.
• Excellent communication skills, including briefing senior leadership and boards.
• Eligibility for appropriate government security clearance.

Desirable Skills

• Experience working with or within regulators, sports bodies or government organisations.
• Relevant professional certifications such as CISSP, CISM, CCSP or equivalent.
• Understanding of AI‑related security risks and model assurance.
• Knowledge of DevSecOps and secure software development practices.
• Experience maturing a security function.
• Familiarity with physical security, operational resilience and business continuity.

Terms And Conditions Of Employment

• Pension 12% – an employee contribution of 5%, with an employer contribution of 7%.
• Flexible Benefit 8% – Employees can choose to invest 8% of their base salary into their pension, or take as cash (post‑tax).
• Reward – a performance‑based reward programme.
• 31.5 days annual leave.
• Flexible and hybrid working – 40% office attendance.
• Occupational sick pay.
• 9 months paid maternity leave + generous paternity and adoption leave.
• A bespoke L&D programme to help you achieve your personal CPD, including paid membership fees.
• Cycle‑to‑work scheme and much more!

Benefits of the Role

If successful you will join a Non‑Departmental Public Body and will be employed as a Public Servant.

Diversity and Inclusion

The IFR is committed to attract, retain and invest in talent wherever it is found.

#J-18808-Ljbffr…