Head of Cyber Security

Explore roles

This role has expired

Dunelm

Head of Cyber Security

Multiple locations
Hybrid
Graduate
Junior
Mid
Senior
Leader

Description

Hybrid requirements: This role has flexible working patterns.
Leicester based / hybrid working. We expect candidates to be at our Leicester head office, our central London Tech office, or at partners for around 3 days per week on average. On-site presence will be required to support stakeholder meetings, team meetings and programme phases such as workshops, testing, and go-live. Travel to other Dunelm sites and partner locations may be expected depending on programme needs.
As our Head of Cyber Security and reporting into our CTIO, you will play a pivotal role in safeguarding our company’s digital assets and ensuring the security of our information systems. This is an exciting opportunity to lead our information security strategy and make a significant impact on our organization’s growth and success. You will work closely with other Technology and company leaders to develop and implement robust security measures, while fostering a culture of security awareness across the company.
Technology is playing an increasingly important role in our success, and we have ambitious investment plans to continue powering our growth through our ‘people led, tech powered’ approach. You will play a critical role in maintaining and improving our security posture through this growth, helping us balancing risk with pace in delivering our ambitious plans.
Key Responsibilities:
Lead the Cyber Security team to enhance functional capabilities and support the development of team members
Develop, implement, and maintain a comprehensive information security strategy to protect the company’s data, systems, and networks
Lead the design and execution of security policies, standards, and procedures to ensure compliance with relevant regulations and industry best practices, and to reflect the latest advancements in technology in areas such as AI
Develop the next stage of our identity management strategy, and lead the resulting projects and system enhancements
Conduct regular risk assessments and vulnerability analyses to identify potential security threats and implement appropriate mitigation measures
Collaborate with IT and other departments to ensure the integration of security measures and developments into all aspects of the company’s operations and programs
Provide guidance and training to employees on information security best practices and promote a culture of security awareness
Oversee the management of security incidents and breaches, including investigation, response, and recovery efforts
Stay up-to-date with the latest security trends, technologies, and threats to proactively address emerging risks
Manage relationships with external security vendors and partners to ensure the effective delivery of security services
Manage the Security budget and investment
Qualifications / Experience:
Proven experience as a CISO or in a similar senior information security role, preferably within the retail industry
Strong knowledge of information security frameworks, standards, and best practices (e.g., ISO 27001, NIST, GDPR)
Excellent understanding of network security, data protection, and risk management principles
Experience in conducting security audits, risk assessments, and incident response
Relevant certifications such as CISSP, CISM, or CISA are highly desirable
Behaviours / leadership attributes:
Our shared values of ‘act like owners’, ‘keep listening and learning’, ‘long term thinking’, and ‘stronger together’ help ensure we are always finding better ways of doing things and spending our time focusing on what’s important.
As Head of Cyber Security, you will be empowered to take the lead on all aspects of our data and information security set up, capabilities and culture. You will bring:
A strategic mindset with strong tactical execution capability, backed up by a balanced view of security considerations with customer, colleague and company performance considerations
Ability to lead, inspire, and manage your team, highly technical partners, and internal tech teams
Comfortable leading and influencing broader stakeholder populations including Board, Exec and functional user teams
Passion for operational excellence and instilling best practice
External curiosity to keep connected to the fast-paced cyber security environment, including representing us on industry and regulatory groups

Culture overview

We're here to help our customers create the joy of feeling truly at home. Join us and you'll find our caring and inclusive culture makes this a place you'll feel right at home too. Learn Wherever you work with us and in whatever role, you'll have every opportunity to keep on learning and keep on growing. Thrive We'll take care of you, and make sure your everyday needs are met, so you can focus on doing a great job and being the best version of you. Belong We embrace diversity in all its forms. We'll celebrate the individual you are and value the unique contribution you bring. Colleague Networks All of our colleagues have the opportunity to be part of our four colleague networks. These are Disability & Neurodiversity, LGBTQ+, Gender Equality and Ethnicity & Race. Each network has co-chairs and an exec sponsor who work closely with us to ensure that we are a workplace where everyone feels supported, celebrated, valued and heard. A chance to give something back We're serious about our role in society. Each of our stores is partnered with a local charity and has its own community Facebook page. And we offer our Pausa Cafés for free to local community groups. We're also proud partners of the mental health charities, Mind (UK and Wales), SAMH (Scotland) and Inspire (Northern Ireland). And each year, we'll give you a day's paid leave to support a charity that matters to you. Work your way We have adapted our ways of working to make sure everyone can feel at home wherever they work. For many colleagues at our Head Office in Leicester and our Central London hub that now includes working on a hybrid basis, combining days in the office with time spent working at home or elsewhere across the business.

Employee benefits

Bonus Scheme
Childcare Vouchers
Flexible Working
Free Parking
Laptop
Learning Allowance
Life Insurance
Pension
Private Healthcare
Share Options
Wellbeing Programme

Office vibe

Birthday Off
City Centre
Hackathons
Office Dog
Open Plan
Social Events

Location

Leadership

John Gahagan
Chief Technology and Information Officer

Tech overview

Our Tech, Digital and Data teams are transforming literally every aspect of our business – from the way we manage and make use of our data, to the relationships we share with our customers. Already, their impact has been felt across the business, and indeed by our customers. But this is just the start and we know there are bigger opportunities ahead. Check out our tech blog for tales behind our talented teams: https://engineering.dunelm.com/ Keep on growing Join us on the tech side and you'll have access to a huge array of learning and development opportunities, including a variety of internally created workshops and externally accredited courses. We also have a substantial tech-specific budget to fund e-Learning licenses, conference visits, resources, and qualifications, plus dedicated mentors, well-being buddies and a wide range of network groups to support you as you progress.

Engineering principles

Agile Process
Code Reviews
Communication and collaboration
Continuous delivery
Continuous Development
Continuous integration
Infrastructure as code
Mentoring
Micro services
Pair programming
Scrum
Test Driven Development
Unit testing

Company tech stack

javascript
JavaScript
aws-lambda
AWS Lambda
graphql
GraphQL
react
React
typescript
TypeScript
jest
Jest
nodejs
Node.js
sql
SQL
python
Python
java
Java
Dunelm
Head of Cyber Security
Leicester
This role has expired