Chief Information Security Officer

About the role

The Department of Energy, Environment and Climate Action (DEECA) is looking for a senior cyber professional to provide strategic leadership for enterprise cyber security, cloud governance and digital resilience. The CISO will protect critical information assets while enabling secure, innovative digital services across a complex public‑sector portfolio.

Key responsibilities

• Develop and oversee enterprise‑wide security policies, frameworks, governance and risk management programmes.
• Ensure compliance with government and regulatory requirements (ISO 27001, NIST, ITIL, COBIT).
• Provide strategic oversight of cloud platforms, driving cost optimisation, service quality and secure cloud governance.
• Identify, assess and communicate cyber and information security risks, fostering a strong security culture.
• Lead major security initiatives, advise executives and embed security into decision‑making, project delivery and operations.

Required profile

• Proven senior leadership experience in cyber security, information security, risk management, IT or OT environments.
• Strong knowledge of security frameworks and standards (ISO 27001, NIST, ITIL, COBIT).
• Experience leading enterprise‑wide security programmes and IAM initiatives.
• Demonstrated ability to advise senior stakeholders on complex security and digital risk matters.
• Excellent communication skills and sound judgement to balance security risk with operational needs.

Required skills

• ISO 27001
• NIST
• ITIL
• COBIT
• Identity and Access Management (IAM)