Salary
Competitive salary, car allowance, bonus, pension
1. Based at our Stockport office (Hybrid working available)
Looking to shape the future of cyber resilience in a dynamic, national organisation?
We’re on the lookout for a forward-thinking Head of Digital Risk & Security to lead Stagecoach’s enterprise-wide information and cyber security strategy. As a senior leader, you’ll play a pivotal role in ensuring our systems, services, and data are safe, resilient, and fully aligned with regulatory and industry standards, enabling millions of journeys every year across the UK. This is a fantastic opportunity to shape how security is embedded into digital transformation at one of the UK’s most recognised public transport brands.
What you’ll be doing:
2. Designing and leading a robust security strategy aligned to business goals and risk appetite
3. Overseeing security governance, cyber risk frameworks, and compliance with GDPR, NIST, and other standards
4. Leading risk assessments and mitigation plans across all business functions and technologies
5. Building and leading a high-performing, diverse security team across governance, ops, threat intelligence and incident response
6. Lead our data protection strategy, ensuring compliance, security, and the highest standards of safeguarding personal information
7. Managing incident response efforts to ensure effective containment, investigation and recovery
8. Partnering with Technology, People, Legal, and Operational teams to embed security into contracts, platforms and processes
9. Reporting on security posture and risk to the CIO and executive leadership
10. Championing employee awareness, training and a cyber-conscious culture
What we’re looking for:
11. Proven senior leadership in information security within a regulated, complex organisation
12. Strong knowledge of cyber threats, modern controls, standards (NIST, ISO 27001) and legal frameworks (e.g. GDPR)
13. Experience delivering enterprise-wide risk governance and cyber security roadmaps
14. Confidence managing third-party risk, continuity planning and incident response
15. Excellent leadership, communication, and stakeholder management skills, able to influence across technical and non-technical audiences
16. Ability to partner with executive leaders, delivering insight and strategic counsel
17. Desirably, professional certifications such as CISSP, CISM, CISA (or equivalent)
Why join Stagecoach?
18. A mission-led business focused on safety, sustainability, and innovation
19. A collaborative leadership team, committed to continuous improvement
20. Competitive salary and benefits, including pension, bonus potential, and hybrid working
21. Opportunities to shape national-level projects and influence Board-level decisions
22. A values-driven, inclusive culture where your contribution makes a real difference
Our culture
At Stagecoach, we never compromise on safety, we succeed because we’re stronger together, and we always put the customer at our core. In this role, you’ll live those values daily — promoting high standards, building inclusive teams, and helping deliver outstanding services across the UK.
Ready to lead the future of digital security at Stagecoach?
Click apply today. We can’t wait to meet you.
Stagecoach is proudly an inclusive employer, striving for a culture where everyone can be themselves and where all the differences people bring are truly appreciated. We welcome applications from all, irrespective of gender, ethnicity, race, religion, beliefs, disability, neurodiversity, sexual orientation, or age.
Location:
Stagecoach Shared Service Centre One Exchange, 20 Railway Road Stockport SK1 3SW