Head of Technology - Risk & Security (London, GB)

## Opportunity Review: Head of Technology - Risk & Security at Currys

Currys, a leading UK tech retailer, is seeking a dynamic and experienced Head of Technology - Risk & Security to safeguard its information assets and technology risk posture. This is a permanent, full-time role based in Waterloo with a hybrid working model, offering a significant opportunity for career growth and impact within a customer-focused and rapidly evolving retail environment.

This role presents a compelling proposition for seasoned professionals looking to influence strategy and champion best practices in cybersecurity and risk management. As the guardian of Currys’ digital landscape, you will be instrumental in enabling both innovation and operational resilience.

Key Advantages for Aspiring Candidates:

• Strategic Leadership: You will have the autonomy to shape and drive Currys’ information security and technology risk governance strategy, directly aligning it with overarching business objectives and regulatory demands.
• Influential Advisory Role: This position places you at the forefront of strategic decision-making, acting as the primary security advisor to business units and translating complex technical risks into clear, actionable business impacts.
• Comprehensive Risk Management: The opportunity involves hands-on experience in identifying, assessing, and managing a wide spectrum of information security and technology risks, as well as designing and implementing robust controls.
• Compliance and Governance Expertise: You will be responsible for ensuring adherence to critical regulations like GDPR and PCI-DSS, while also developing and maintaining essential information security policies.
• Resilience and Incident Response: This role offers the chance to lead the development and testing of incident response and business continuity plans, positioning you as a key contact during critical security events.
• Collaborative Environment: You'll work closely with various departments (IT, Legal, Data Protection) and external vendors, fostering a collaborative approach to achieve end-to-end security and risk alignment.
• Focus on Continuous Improvement: The role encourages a proactive approach to security, requiring you to stay abreast of emerging trends and innovations to continuously enhance the organization’s security posture.
• Impact Beyond Business: Currys is committed to sustainability, being the UK’s biggest recycler and repairer of tech. This role allows you to contribute to a company making a positive impact on people and the planet.
• Career Development and Support: Currys is dedicated to employee growth, offering ongoing training, new opportunities, and the chance to develop skills for life.
• Inclusive Culture: The organization champions diversity and inclusion, ensuring every voice is heard and that you have a fair opportunity to showcase your talents.

Key Considerations for Your Career Path:

• Senior Leadership Experience: A proven track record of leading information security and risk teams at a senior level is essential for success in this role.
• Board-Level Engagement: You should be comfortable and confident engaging with stakeholders up to Board and Executive Committee levels, requiring strong communication and presentation skills.
• Technical and Framework Knowledge: A solid understanding of compliance, policy design, and information security frameworks (such as ISO 27001, NIST, COBIT, CIS Controls) is crucial.
• Governance, Risk, and Compliance (GRC) Tools: Familiarity with GRC toolsets, internal audit processes, and security controls assessment will be a significant advantage.
• Pragmatic Approach to Security: The ability to balance business priorities with security requirements in a practical and effective manner is vital in a fast-paced retail environment.
• Problem-Solving and Collaboration: Strong problem-solving skills and a genuinely collaborative mindset are necessary to navigate complex challenges and work effectively with diverse teams.
• Educational and Certification Background: While a degree in Technology, Information Security, Risk Management, or equivalent experience is required, professional certifications like CISSP, CISM, CRISC, or ISO 27001 Lead Implementer are highly desirable and can strengthen your candidacy.
• Strategic Planning Skills: Experience in strategic planning, risk-based information assurance, business impact analysis, and threat/vulnerability analysis will be highly valued.

This Head of Technology - Risk & Security position at Currys offers a challenging yet rewarding opportunity for a skilled professional to make a significant impact, contributing to the protection of a major retail brand while also fostering personal and professional development within a supportive and forward-thinking organization.