Job Description

We're looking for a Director of Security to join our team based in either Bradford or Leeds, with the flexibility to travel across the UK and internationally. This is a permanent hybrid position, working in the office at least two days a week.
As Director of Security, you will lead the development and execution of our global security strategy, ensuring our data, systems, and services are safeguarded to the highest standards.
You will hold overall accountability for security across Blume, providing expert guidance on information security, cyber governance, risk management, and compliance. In addition, you'll oversee the delivery of security services through our external service partner.
The ideal candidate will combine strategic leadership with hands-on oversight, ensuring that our security controls, processes, and partnerships operate effectively across all areas of the business and the diverse markets we serve.
What will you be doing?

• Take ownership of and continuously enhance the company's Information Security Management System (ISMS), ensuring alignment with ISO 27001 and other relevant standards.
• Develop and maintain security policies, standards, and control frameworks tailored to the needs of a global SMB.
• Provide regular updates to the Executive Team and the Liberty Global Group Chief Security Officer on security posture, risk exposure, compliance status, and incident trends.
• Lead the identification, evaluation, and mitigation of information security and resilience risks across people, technology, and third-party relationships.
• Ensure compliance with data protection and privacy regulations (e.g., GDPR, DPA 2018), and maintain readiness for audits, customer assurance reviews, and certifications (e.g., ISO 27001).
• Collaborate with legal, compliance, and operational teams to embed regulatory requirements into day-to-day operations and technology delivery.
• Serve as the primary security contact for all prospective customers of Blume Services.
• Create and maintain security-focused sales and marketing materials for all Blume go-to-market products.
• Act as the service recipient for security services provided by Liberty Global Group, including architecture and engineering, security operations, and business continuity.
• Lead the coordination and escalation of all security incidents, vulnerabilities, and operational security issues, ensuring timely and effective resolution.
• Act as the single point of contact for cyber security incident and crisis management, reporting directly to the Executive Team and Group Chief Security Officer.
• Own and manage the company's Business Continuity and Disaster Recovery frameworks, ensuring they meet operational and contractual requirements.
• Lead resilience testing and incident simulation exercises, ensuring lessons learned are documented and actioned.

We tend to look for people with:
Essential:

• Significant experience as a Global Security Leader or CISO, including oversight of external security service providers and providing security input into sales engagements.
• Proven track record of reporting to C-Suite, Board, and Audit Committees on all aspects of cyber security and risk.
• Demonstrated experience in managing cyber security budgets and conducting operational cost-benefit analyses.
• Deep understanding of security frameworks, operational risk, and regulatory standards such as ISO 27001, SOC 2, NIST, GDPR, DORA, and PCI-DSS.
• Hands-on experience in implementing and maturing ISMS and BCMS frameworks within SMB or mid-market environments.
• Proven capability in managing cyber incidents and crises, including direct engagement with executive leadership, boards, and regulatory bodies.
• Strong background in vendor management, service delivery oversight, and governance of security operations.
• Exceptional stakeholder engagement and communication skills, with the ability to influence both technical and non-technical audiences.

Desirable:

• Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer.
• Practical knowledge of cloud and infrastructure security across platforms like AWS, Azure, or GCP, including identity and access management, network security, and endpoint protection.
• Experience leading or supporting external audits and certification processes.
• Solid understanding of data privacy principles and regulatory frameworks, including GDPR, data classification, and cross-border data governance.
• Experience working with managed security service providers or in vendor-side collaboration.

What's in it for you?

• Competitive salary + Bonus.
• 25 days annual leave with the option to purchase 5 more.
• Enjoy your birthday off, plus receive an additional 3 days of annual leave once you reach 5 years of service.
• Access to wellbeing and mental health benefits such as the Calm app, personal medical, critical illness cover and dental insurance, plus many more.
• Matched pension contribution up to 10%
• Access to our car benefit scheme
• Access to our online learning platform to continue to develop and grow your career with us
• The chance to join an innovative, fast-paced and passionate team

Who we are:
Liberty Blume, a Liberty Global company, is a rapidly growing business services provider, specialising in tech-enabled back-office solutions. Our mission is to deliver efficiency, scale and value to our customers through Business, Procurement and Financial Solutions. If you're curious, customer centric and enjoy being one step ahead, join us on our scale up journey and unlock your freedom to grow!
Liberty Global is an equal opportunity employer, committed to an inclusive environment and accommodating all candidates. We're eager to hear from you, no matter your background.

Skills Required