Head of Cyber Risk Consulting

In this role you lead Howden’s Cyber Risk Consulting practice within the Risk Advisory leadership team, driving strategy, growth and high-quality client outcomes. You will shape service offerings across information security, cyber, resilience and data protection, while expanding commercial opportunities and influencing market direction. You’ll manage talent, governance and performance to deliver value for senior stakeholders and boards. This is a chance to scale a strategic function and advance Howden’s resilience capability in a global, collaborative environment.

• competitive discretionary annual bonus
• life assurance of four times salary
• income protection up to five years
• private medical insurance
• generous pension
• 25 days annual leave (27 after five years)

• Set strategic direction for the Cyber Risk Consulting function and ensure sustainable, high-quality services.
• Drive revenue, profitability, growth and utilisation targets while building a high-performing team.
• Lead workforce planning, talent development and succession activities; represent Howden through thought leadership and market initiatives.
• Evolve risk service offerings (Information Security, Cyber Security, Operational Resilience, Business Continuity, Third-Party Risk, Data Protection, Tech Risk) in line with risk strategy and demand.
• Lead complex client engagements, providing strategic guidance and translating risk into business outcomes for executives and boards.
• Support clients with frameworks and standards (ISO 27001, ISO 22301, Cyber Essentials, NIST) and regulatory requirements.
• Foster cross-functional collaboration to broaden Howden services and create new offerings (e.g., AI risk tools).
• Establish governance, quality, performance standards, and robust reporting across service delivery.

• Demonstrable leadership and strategic management experience in professional services, consulting or advisory teams.
• Degree or equivalent professional experience in Information Security, Risk Management, Technology, or related discipline.
• Proven ability to develop service lines and drive growth in a commercial environment.
• Digital resilience expertise across Information Security, Cyber Security, Operational Resilience, Business Continuity or Technology Risk.
• Strong understanding of information security risk management and control frameworks.
• Experience supporting resilience, security and governance transformations.
• Practical experience with ISO 27001, ISO 22301, Cyber Essentials, NIST or equivalent frameworks.
• Client and commercial management with stakeholder engagement, and ability to present to executive committees and boards.
• Proven business development, proposal production and revenue growth experience.
• Experience across regulated and non-regulated sectors (financial services, healthcare, technology, public sector, retail).

• Strategic leadership
• Stakeholder engagement
• Cross-functional collaboration
• Information Security
• Cyber Security
• Operational Resilience