Head of Cyber Risk Consulting
Howden · United Kingdom
We have an exciting opportunity for a Head of Cyber Risk Consulting to lead our Cyber Risk Consulting practice and play a key role within the Howden Risk Advisory (HRA) leadership team, ideally based from our London office (hybrid working with flexibility).
As Head of Cyber Risk Consulting, you will drive the strategy, growth, service development, and performance of the Cyber Risk team; ensuring the delivery of high-quality client outcomes while identifying new opportunities to enhance resilience capabilities, support risk transfer strategies and drive commercial growth.
A snapshot of your day:
- Lead the Cyber Risk Consulting function, setting strategic direction and driving the delivery of high-quality, commercially sustainable services. Accountable for revenue, profitability, growth and utilisation targets, while building and developing a high-performing team and fostering a culture of collaboration, innovation, accountability and continuous improvement
- Lead workforce planning, talent development and succession activities, and represent Howden through thought leadership, industry engagement, publications, events and market-facing initiatives.
- Develop and evolve the existing risk service offerings, including Information Security, Cyber Security, Operational Resilience, Business Continuity, Third-Party Risk Management, Data Protection and Technology Risk, ensuring alignment with the wider Risk & Resilience strategy and market demand.
- Drive commercial growth through proposition development, business development, solution design, strategic client engagement, cross-collaboration to introduce broader Howden services, and offer new service offerings to meet changing client challenges, e.g. AI risk tools
- Act as a trusted advisor to clients, providing strategic guidance and leading complex engagements, resilience programmes, maturity assessments, and strategic risk initiatives across cyber risk, information security, and operational resilience matters, while translating technical risks into practical business outcomes for senior stakeholders and Boards.
- Support clients in implementing and enhancing recognised frameworks and standards, including ISO 27001, ISO 22301, Cyber Essentials, NIST CSF and relevant regulatory requirements.
- Develop referral pathways and collaborative opportunities across advisory, consulting, broking and insurance teams to maximise client value, solutions for clients and business growth.
- Share market intelligence, regulatory developments and emerging risk trends to support service development and client value creation.
- Maintain governance, quality and performance standards across all service delivery, ensuring regulatory compliance, continuous improvement and the achievement of business objectives through robust reporting, resource management and market insight.
- Establish and monitor KPIs, SLAs and performance measures to support service excellence and business objectives and provide regular reporting on operational performance, financial results, resource utilisation, pipeline development and strategic objectives.
- Monitor developments in cyber threats, technologies, regulation and resilience practices to inform strategic decision-making and service evolution.
We would love to hear from you if you have:
- Demonstrable leadership and strategic management experience; leading professional services, consulting, or advisory teams with coaching, and people development capabilities
- Degree or equivalent professional experience in Information Security, Risk Management, Technology, or a related discipline.
- Proven ability to develop service lines and drive growth within a commercial environment.
- Digital resilience expertise with significant experience in Information Security, Cyber Security, Operational Resilience, Business Continuity, or Technology Risk.
- Excellent understanding of information security risk management and control frameworks
- Experience supporting organisations through resilience, security, and governance transformations.
- Practical experience of standards such as ISO 27001, ISO 22301, Cyber Essentials, NIST, or equivalent frameworks.
- Demonstrable client and commercial management experience; with excellent client relationship management and stakeholder engagement skills and experience presenting to Executive Committees, Boards, and senior leadership teams.
- Demonstrable success in supporting business development, proposal production, and revenue growth.
- Experience working across regulated and non-regulated sectors (e.g. financial services, healthcare, technology, public sector, retail)
Desirable but not essential:
- Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, CBCI, MBCI, or equivalent Business Continuity qualification
- Relevant resilience, risk, governance, or cyber security certifications.
- AI risk experience
What's in it for you:
- Competitive discretionary annual bonus.
- Core benefits including life assurance of four times salary, income protection of 75% of salary for up to five years, and single private medical insurance cover.
- A generous pension scheme
- 25 days' annual leave, increasing to 27 days after five years' service.
- Access to the Howden flexible benefits programme, offering a wide range of benefits and discounts to support your wellbeing, family life and lifestyle.
- The opportunity to be part of a growing global business where career development, collaboration and innovation are encouraged.
Accessibility:
If you require reasonable adjustments or want more information on accessibility, please let us know.
Follow Howden on LinkedIn
We kindly ask recruitment agencies to not send speculative CVs. Should we need assistance, we will reach out. All enquiries should be directed to careers@howden-group.co.uk