Head of Department, Information Technology

Job Purpose

The Head of Information Technology is responsible for the overall leadership, governance and security of the Society's IT environment. The role develops and implements the Society's IT strategy, with a strong focus on cybersecurity, technology risk management, infrastructure resilience, business continuity and regulatory compliance.

The incumbent oversees the reliability and effectiveness of the Society's hardware, network, cloud and business application environments, while providing direction and technical oversight to the IT team and external service providers. The role is expected to possess sufficient technical depth across both infrastructure and applications to guide the team, assess risks, make informed decisions and intervene in complex or critical matters when required.

Job Responsibilities

1. IT Strategy and Governance

• Develop and drive the Society's IT strategy, policies and technology roadmap in alignment with organisational priorities.

• Establish appropriate IT governance, standards and controls across infrastructure, systems, data and technology projects.

• Advise Management on technology risks, investment priorities and opportunities for digital enablement.

• Plan and oversee the IT budget, ensuring that resources and investments are appropriately prioritised.

2. Cybersecurity and Technology Risk

• Lead the Society's cybersecurity strategy and technology risk management framework.

• Ensure appropriate controls are established for access management, information security, cloud services, networks, endpoints and business applications.

• Oversee cybersecurity risk assessments, vulnerability reviews and the timely remediation of significant findings.

• Lead the organisation's response to major cybersecurity incidents and ensure appropriate escalation, recovery and reporting.

3. Resilience and Compliance

• Ensure that IT disaster recovery, system backup, business continuity and cybersecurity incident response arrangements are established and tested.

• Monitor compliance with applicable cybersecurity, data protection, audit and technology governance requirements.

• Provide oversight of significant technology risks, incidents and audit findings, and report material matters to Management.

• Ensure major technology changes and initiatives undergo appropriate risk, security and governance review.

4. Leadership and Organisational Enablement

• Lead and develop the IT team, with clear accountability across the infrastructure and applications portfolios.

• Set priorities and performance expectations for the delivery of secure, reliable and effective IT services.

• Partner departments to understand organisational needs and guide the adoption of appropriate technology solutions.

• Lead or sponsor major technology and cybersecurity initiatives with organisation-wide impact.

• Keep Management informed of significant developments, emerging risks and strategic technology considerations.

Job Requirements

1. Qualifications and Experience

• Degree in Information Technology, Computer Science, Cybersecurity, Information Systems or a related discipline.

• At least 8 years of relevant IT experience, including 3 years in a managerial or leadership capacity.

• Strong experience in cybersecurity governance, technology risk management, incident response and business continuity.

• Experience developing IT strategies, policies and governance frameworks, and leading major technology initiatives.

• Relevant cybersecurity or IT governance certifications would be advantageous.

2. Additional Skills and Knowledge

• Strong knowledge of cybersecurity principles, security controls and relevant regulatory requirements.

• Broad understanding of IT infrastructure, cloud services, networks, enterprise applications and data protection.

• Ability to assess technology risks and translate them into practical business recommendations.

• Strong leadership, stakeholder management and communication skills.

3. Desired Behaviours

• Demonstrates integrity, sound judgement and discretion.

• Strategic and forward-looking, while remaining attentive to operational realities.

• Takes ownership and remains calm and decisive during incidents.

• Collaborative, adaptable and committed to continuous learning.