Chief Information Security Officer - Foreign, Commonwealth & Development Office - SCS1

Location

This role can be based in either our London HQ in King Charles Street or our East Kilbride HQ. It may also be possible to be based in our Hanslope Park location in Milton Keynes. Regular travel to our other offices will be required and FCDO policies on Hybrid Working (minimum 60% in the office) will apply. Occasional international travel will be required.

About the job

Job summary

The FCDO, formed from the merger of the Foreign and Commonwealth Office and the Department for International Development in September 2020, leads the UK's international diplomatic, development, and consular efforts. It employs around 17,000 staff across 180 countries and territories, supported by 12 agencies and public bodies. UK-based staff work in London, East Kilbride, and Milton Keynes.

Our vision for the Foreign, Commonwealth and Development Office (FCDO) is to make the UK stronger, safer and more prosperous, by leading and integrating delivery of the Government’s objectives abroad. FCDO is a truly global organisation, with a presence across five continents and partnerships spanning international, regional, national and local levels. We operate at the forefront of some of the most complex global challenges, advancing the United Kingdom’s national interest while contributing to global security and prosperity.

Our ambition is clear: to be recognised as a world leader in the use of technology and data to deliver diplomatic and development outcomes. To achieve this, we are driving one of the most significant and ambitious digital transformation programmes in government becoming faster, more agile, better informed, and more resilient in the face of global disruption.

Job description

This role reports to the Chief Digital and Information Officer (CDIO) and will be a member of the Digital, Technology and Security Directorate (DTaS) Senior Leadership Team, supporting the CDIO with the collective leadership of the Directorate.

As Chief Information Security Officer (CISO), you will support the safe and secure delivery of UK Foreign Policy and Development aims, playing your part in major global events. You will lead the FCDO’s operational cyber security effort, working with a team of information management and cyber security professionals to provide support, advice, challenge, assurance and continual improvement on information and cyber risk and the protection of FCDO’s data, infrastructure and assets both in the UK and our overseas network.

Key Responsibilities

• Lead the function: Provide clear, visible leadership to a diverse, global information and cyber security function of over 60 professionals, fostering an inclusive, high-performing culture and building deep specialist capability across FCDO.
• Set direction and deliver at pace: Define and drive FCDO’s information and cyber security strategy, policy and standards—ensuring they are agile, pragmatic and aligned to organisational priorities, while delivering measurable outcomes in a fast-moving environment.
• Own governance and assurance: Establish and continuously evolve robust security governance, risk and assurance frameworks, ensuring they are effective, proportionate and embedded across the organisation.
• Advise and influence at the highest levels: Act as a trusted advisor to senior leaders and ministers, communicating complex security risks clearly and enabling informed, timely decision-making by risk owners.
• Drive continuous improvement: Lead ongoing assessment and management of vulnerabilities, ensuring risks are identified, prioritised and mitigated effectively, and that policies and controls remain relevant in a changing threat landscape.
• Enable secure delivery: Develop and deploy clear, practical security guidance that supports colleagues and partners to operate securely across FCDO’s global platform without constraining delivery.
• Build partnerships and networks: Establish strong, enduring relationships across FCDO, UK Government and international partners, strengthening collaboration and sharing best practice on cyber security.
• Represent UK interests globally: Act as a senior ambassador for FCDO and the UK on cyber and information security, promoting, protecting and balancing national interests in international and regional forums.
• Communicate with impact: Engage, influence and negotiate confidently across a wide range of stakeholders and cultural contexts, tailoring messages for local and international audiences.
• Champion organisational capability: Support the development of professional security skills and career pathways within FCDO, ensuring the function continues to evolve as a leading digital, data and technology organisation.

Person specification

Working at FCDO offers a uniquely challenging and rewarding career. We are ambitious to be the world’s leading diplomatic and development organisation driven by impact, delivery and excellence. We are looking for exceptional individuals who thrive in complexity, operate with pace and purpose, and deliver meaningful outcomes in high-profile environments.

We welcome talent from a broad range of backgrounds and value transferable skills. The Essential Criteria to succeed in this role and be selected are:

• Senior leadership and delivery experience
  A strong track record operating at a senior level within complex organisations, spanning risk management, digital transformation and information security. You will have led large, diverse teams through demanding environments motivating people, prioritising effectively and delivering results despite constrained resources. You are a leader first, able to inspire, empower and drive performance across a multidisciplinary function.
• Pragmatic, agile and outcome-focused approach
  The ability to balance risk with delivery, applying sound judgement in fast-paced and evolving contexts. You will understand how to operate within defined parameters while confidently pushing boundaries where appropriate to achieve outcomes.
• Deep understanding of security in context
  Proven ability to interpret complex user, business and technology needs, and translate these into proportionate, practical security advice. You will understand operational security in real-world settings, including supply chain risks, and enable secure solutions rather than constrain delivery.
• Strategy, standards and governance expertise
  Experience of setting organisational direction through the development of policies, standards and frameworks that create secure, resilient and well-governed environments. You will bring strong knowledge of industry best practice and information security management approaches.
• Outstanding communication and influence
  Exceptional ability to communicate complex security and risk concepts clearly and persuasively to a wide range of audiences from technical specialists through to senior leaders and ministers. You will be credible, confident under challenge, and able to tailor your message to context and audience.
• Credible technical grounding
  A strong understanding of security technologies, system architectures and threat landscapes. You will be able to assess vulnerabilities, understand their impact on current and future systems, and engage confidently with technical experts while maintaining focus on leadership and outcomes.
• Analytical strength and problem-solving
  The ability to interpret and connect complex data and information, identify risks and opportunities, and develop clear, evidence-based solutions. You will be comfortable navigating ambiguity, diagnosing issues quickly and shaping effective responses.
• Resilience, accountability and growth mindset
  A driven, motivated individual who takes ownership, follows through on commitments and leads with integrity. You will demonstrate resilience in the face of challenge, continually seek to improve, and actively invest in your own development and that of others.