Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 125 days ago

Head of Information Security – Compliance and Governance

Proactis7 open roles

Where
United Kingdom (Reading), United Kingdom
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowHead of Information Security – Compliance and GovernanceProactis · United Kingdom (Reading), United Kingdom

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Proactis's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 125 days ago

The posting

Job description

Reporting to the CISO, the Head of Information Security – Compliance and Governance will lead Proactis’ information security governance, compliance and assurance capability. The role will be responsible for maintaining and continuously improving the Information Security Management System (ISMS), driving audit readiness, strengthening control effectiveness and ensuring that Proactis can evidence robust security, privacy and operational assurance to customers, auditors and internal stakeholders. This is a hands-on leadership role suited to an experienced security governance professional who can operate strategically while also being comfortable owning detail, evidence, documentation and delivery. The successful candidate will work closely with Product, Engineering, Cloud Infrastructure, Operations, Legal, HR, Finance, Sales and Customer Success to embed effective security governance into the way Proactis designs, delivers and supports its SaaS services.

  • Lead, maintain and continuously improve Proactis’ ISMS, ensuring it remains effective, auditable and aligned with ISO 27001 requirements and business priorities.
  • Own and coordinate external certification and assurance activities, including ISO 27001 audits and other customer or regulatory assurance requirements relevant to a SaaS provider.
  • Drive audit readiness and evidence management across security, technology and business control areas, including ISAE 3402 Type II / SOC 1, SOC 2, ISO 27001 and related assurance frameworks where applicable.
  • Maintain the security governance framework, including policies, standards, procedures, control documentation, risk registers, exceptions, evidence repositories and reporting packs.
  • Lead internal security control reviews and internal audit activities, ensuring findings are clearly documented, risk-rated, tracked and remediated in a timely manner.
  • Partner with Product, Engineering and Infrastructure teams to ensure security and compliance requirements are embedded into SaaS platform design, software development, change management and operational processes.
  • Support customer assurance activities, including security questionnaires, due diligence requests, contractual security reviews, customer audits and evidence-based responses to enterprise customers.
  • Support privacy and data protection governance, including GDPR-aligned processes, records of processing, DPIAs, supplier assessments and privacy-by-design activities in collaboration with Legal and other stakeholders.
  • Ensure effective governance of third-party and supplier security risk, particularly for cloud, hosting, managed service and technology suppliers supporting Proactis’ SaaS services.
  • Support security incident governance by ensuring escalation, notification, evidence capture, lessons learned and stakeholder communications processes are defined, tested and understood.
  • Define and report meaningful security and compliance metrics, KPIs and KRIs to the CISO and senior stakeholders, using data to drive prioritisation and continuous improvement.
  • Oversee security awareness, policy attestation and compliance training activities, ensuring colleagues understand their responsibilities in protecting customer and company information.
  • Champion continuous improvement of governance, risk and compliance processes, including opportunities to improve automation, documentation quality, knowledge management and audit efficiency.
  • Extensive experience implementing, maintaining or materially improving an ISMS in a technology, SaaS, software, cloud services or similarly complex environment.
  • Strong practical knowledge of ISO 27001, including experience managing external audits, certification cycles, surveillance audits, internal audit programmes and control remediation.
  • Experience supporting or managing independent assurance frameworks such as ISAE 3402 Type II / SOC 1, SOC 2, ISO 27017, ISO 27018, Cyber Essentials / Cyber Essentials Plus or equivalent customer assurance programmes.
  • Strong understanding of SaaS security governance, including cloud service operations, secure software development lifecycle, access control, vulnerability management, change management, incident response and customer data protection.
  • Experience designing, maintaining and governing security policies, standards, control libraries, risk registers, evidence repositories and compliance documentation.
  • Demonstrable experience working with external auditors, certification bodies, customer auditors and internal stakeholders to provide clear, accurate and timely evidence of control operation.
  • Experience responding to customer security questionnaires, due diligence requests and customer audit enquiries in an organised, consistent and commercially aware manner.
  • Good understanding of GDPR and privacy governance, including practical experience with privacy management processes and controls for personal data in business and SaaS environments.
  • Ability to assess risk findings in the context of the wider organisation, customer commitments and the threat landscape, and to explain risk clearly to technical and non-technical audiences.
  • Excellent documentation, report writing and presentation skills, with strong attention to detail and the ability to produce audit-ready materials.
  • Strong stakeholder management skills, with the ability to influence teams across Product, Engineering, Cloud Infrastructure, Legal, HR, Finance, Sales, Customer Success and senior management.
  • Highly organised, pragmatic and delivery-focused, with the ability to manage competing priorities and maintain progress across multiple governance, assurance and improvement activities.

Job benefits

  • Relevant professional certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISM, CISSP, CRISC, CISA, CCSP, Security+ or equivalent experience.
  • Experience with Microsoft security and identity technologies such as Microsoft Defender, Microsoft Sentinel, Intune, Entra ID and Purview.
  • Experience with cloud platforms and SaaS operating models, including Azure, AWS or hybrid cloud environments.
  • Knowledge of NIST, CIS Controls, OWASP Top 10, secure software development and vulnerability management practices.
  • Experience implementing or maintaining a Privacy Information Management System (PIMS), such as ISO 27701-aligned privacy governance.
  • Experience of PCI DSS, ISO 22301, ISO 20000 or ISO 9001 where relevant to service delivery or customer assurance.
  • Experience building or improving compliance knowledge bases, document management systems or evidence repositories, including SharePoint-based governance libraries.
  • Experience using GRC tooling, workflow automation or AI-enabled knowledge management to improve audit readiness and compliance efficiency.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Proactis's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Proactis's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Proactis's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.