Head of Cyber Security

Salary: Competitive plus benefits

Working Pattern: Full Time

Contract Type: Permanent

About Matalan

From humble beginnings to disruptive innovations in the retail industry, find out about how Matalan is ever-evolving here.

We know as a team, we are stronger together – we champion equality for all and make lasting connections that go beyond work. We thrive off our inclusive culture, encouraging our colleagues to bring their true selves to work and contributing to collective creativity, open-mindedness and growth.

We want give every candidate the opportunity to perform at their best throughout the application and interview process and then ultimately in their role. If you require any adjustments during our recruitment process, please don’t hesitate to let us know.

In the event that a high volume of suitable applications are received, the post may close prior to the specified closing date. Please apply as soon as possible if interested.

About The Role

The Head of Cyber Security / CISO is accountable for leading Matalan’s cyber security strategy, governance, risk management and operational resilience at a senior, non-board level. The role provides dedicated ownership of cyber risk, security architecture, incident readiness, supplier security and continuous improvement, ensuring cyber security priorities are translated into clear business outcomes, measurable risk reduction and effective protection of Matalan’s customers, colleagues, data and critical services.

Key Responsibilities

Leadership

• Lead and develop Matalan’s internal cyber security capability, ensuring the right skills, succession plans and accountabilities are in place across cyber governance, architecture, delivery and continuous improvement
• Provide senior cyber security leadership and advice to the Director of IT, Executive team and relevant governance forums, translating technical risk into clear business impact and decision options
• Lead the performance management of cyber security contractors, managed service partners and specialist third parties, ensuring clear ownership, challenge and delivery against agreed outcomes
  
  

Cyber Strategy, Governance And Risk Management

• Own and maintain Matalan’s cyber security strategy and roadmap, ensuring priorities are risk-led, business aligned and focused on measurable improvements in resilience and recovery
• Establish and embed cyber governance, risk and compliance processes, including policies, standards, risk appetite, risk assessment, control assurance and reporting
• Maintain a transparent view of cyber threats, vulnerabilities, control gaps and enterprise cyber risks, ensuring decisions are prioritised using business impact and agreed risk appetite
• Lead cyber security reporting for IT leadership, Executive forums and relevant governance groups, providing clear insight on risk posture, progress, investment choices and residual risk
  
  

Security Architecture, Operations And Incident Readiness

• Ensure cyber security is embedded into technology strategy, architecture, change delivery and supplier solutions from the outset, reducing risk and rework
• Oversee security operations, monitoring, vulnerability management, identity security, endpoint controls, network security and logging improvements delivered through internal teams and managed service partners
• Own cyber incident readiness and response leadership, including incident response plans, rehearsals, CIRT mobilisation, technical response coordination and lessons learned
• Drive continuous improvement of cyber controls, ensuring audit findings, incident lessons, maturity assessments and threat intelligence translate into prioritised action
  
  

Supplier And Third-Party Cyber Risk

• Establish and oversee third-party cyber risk management, ensuring critical suppliers, SaaS providers and technology partners are assessed, governed and monitored proportionately to risk
• Work with Procurement, Legal, Vendor Management and business owners to embed cyber security obligations into supplier onboarding, contracts, assurance activity and incident escalation routes
  
  

About You

• Senior cyber security leadership experience in a complex, business-critical technology environment, ideally across retail, ecommerce, logistics or similarly operational environments
• Strong understanding of cyber governance, risk management, compliance, incident response, security architecture, vulnerability management, identity and access, supplier risk and security operations
• Experience translating technical cyber risks into clear business impact, investment choices and executive-level decisions
• Experience leading internal teams, managed security partners, contractors and specialist cyber suppliers through clear outcomes, governance and performance management
• Relevant cyber security qualifications or equivalent experience are desirable, such as NCSC CAF, NIST, DORA or related security risk frameworks
  
  

Benefits

In addition to competitive salaries, we also offer the below core benefits:

• 20% staff discount, which increases with length of service
• Thrive Recognition Scheme
• Wellbeing support provided by the Retail Trust
• Life Assurance
• Retail Rewards platform offering discounts for other retailers
• Pension Scheme
• Access to a wide range of career development
• Additional benefits may apply depending on your role and area of the business