Chief Information Security Officer (CISO) - dmg media
About this role
Chief Information Security Officer (CISO) Location: DMGT HQ - High Street Kensington, London Position: Permanent About the Role We are seeking a dynamic, credible, and highly influential Chief Information Security Officer (CISO) to lead our cyber security and tech risk function from our London headquarters. In this role, you will balance strategic vision with operational execution. You will safeguard our vast digital media infrastructure against an evolving global threat landscape while enabling business growth and digital innovation. Crucially, you will spearhead the governance and responsible adoption of Artificial Intelligence (AI) across our editorial, engineering, and commercial workflows. Main Responsibilities Strategic Leadership & Board Engagement: Strategy Execution: Define and execute the enterprise-wide cyber security and information risk strategy, ensuring it is aligned with fast-moving media and commercial growth objectives. Executive Advisory: Act as the principal security advisor to the Board and Executive Committee, translating complex cyber risks and regulatory exposure into clear, commercially focused business impact. Business Partnership: Partner closely with editorial, legal, technology, and operations teams to embed security into core business decision-making and project launches. Next-Gen Governance & AI Security: AI Security & Governance: Lead the organisation’s approach to AI security and responsible adoption. Establish robust control frameworks and risk mitigation strategies tailored to media-specific AI usage (e.g., editorial automation, data scraping, LLMs). Enterprise Risk & Compliance: Drive risk and governance initiatives to ensure ongoing compliance with UK Data Protection (GDPR), online privacy standards, and relevant media regulations. Metrics & Reporting: Establish clear security metrics, reporting frameworks, and executive dashboards to maintain board-level visibility of our risk posture. Security Operations & Cyber Resilience: SecOps Management: Oversee day-to-day security operations, threat management, threat intelligence, and cyber resilience capabilities across our high-traffic digital platforms. Crisis Leadership: Lead crisis management and executive-level incident response protocols during live cyber threats or business continuity events. Vendor & Ecosystem Management: Manage strategic third-party technology and security vendors, ensuring performance, commercial value delivery, and robust supply chain risk mitigation. Team Development: People Leadership: Lead, mentor, and develop a high-performing team of 12 specialists spanning security operations, tech risk, governance, and assurance functions. Person Specification Executive Track Record: Proven experience operating as a CISO or a senior cyber security executive within a large, high-availability, or digital-first environment (media, tech, or entertainment sectors preferred). Emerging Tech Proficiency: Strong, practical understanding of AI risk, LLM vulnerabilities, data protection nuances in machine learning, and emerging technology challenges. Operational Mastery: Deep expertise across security operations (SOC), enterprise risk management, identity & access management, and third-party vendor oversight. Commercial Acumen: Strong business acumen with the ability to articulate technical risk in terms of reputation, brand trust, and commercial impact. Exceptional stakeholder engagement skills, with the capability to firmly influence and collaborate at the Board and Executive level. Crisis Management: A calm, decisive, and authoritative leadership style under pressure, with experience managing high-stakes cyber incidents. Adaptability: Agility to thrive within a fast-paced, constantly evolving, 24/7 newsroom and media tech environment. Package Description Our benefits package increases the longer you’ve been with us. Here’s what to expect: 25 days’ holiday (increasing by 1 per year up to a total of 30) Pension plan and life cover Discounts on online shopping, dining cards and vouchers, and access to our Employee Assistance Programme Onsite gym, subsidised canteen and onsite nurse and GP clinics Plus much more... About Us dmg media’s brands deliver highly engaging, trusted content to millions of loyal customers around the globe, 24 hours a day, seven days a week. Together, Daily Mail, The Mail on Sunday, Metro and The i Paper, reach more than 24million people daily. In the UK alone, its brands reach over 10million people daily. Its newsbrands are expert at getting to the bottom of the stories most relevant to our readers. To find out more about dmg media and its brands visit www.dmgmedia.co.uk. Our Commitment We are committed to increasing diversity and maintaining an inclusive workplace culture. We welcome applications from all qualified candidates regardless of their ethnicity, race, gender, religious beliefs, sexual orientation, age, marital status, or disability. We are Disability Confident Committed. Please let us know if you require any recruitment documentation in other formats or if you require reasonable adjustments to be made during the recruitment process. Please be assured that any such information will be held separately to your recruitment application and will not be considered as part of the selection process.
What this role is, and what else it is called
Employers in the UK advertise this kind of work as Security Engineer, Cybersecurity Engineer, Security Architect and Cyber Security Engineer too, so it is worth searching more than one wording. It is a head-of or director level Cybersecurity role in the UK, advertised without a stated working pattern, which is worth asking about.
About hiring at Dmgmedia
Dmgmedia appears alongside 10 other live technology roles on this source domain, across Data, AI & Machine Learning, UX, UI & Digital Design and Cybersecurity. See all Dmgmedia roles, salaries and stack.
How this role compares to the market
Head-of and director-level roles make up 128 of the live UK IT market.
Market figures are today's snapshot of reportable live UK roles on public careers and vacancy pages; see hiring trends.
Detected on Dmgmedia's careers page. ProdReady Recruitment lists this vacancy as an aggregator and is not the employer; applications go to the employer's own site.