The Role of a PE NED
Position title
Non-Executive Director - Cyber Security and Information Risk
Description

The opportunity

A UK organisation is seeking a Non-Executive Director with senior cyber-security and information-risk expertise to strengthen its board’s oversight of one of the most significant risks it faces. Cyber security is now unmistakably a board-level and business-wide concern rather than a technical one — a serious incident can threaten operations, finances, reputation and regulatory standing at once — and boards increasingly value a director who can bring genuine, informed judgement to it.

This is a governance appointment, not an operational one. The role is to provide oversight and constructive challenge — helping the board understand, question and govern the organisation’s cyber-security posture and information risk — not to run the security function or lead incident response, which remain the responsibility of management and its specialists. The successful candidate will translate deep security credibility into effective board-level contribution as a full member of the board.

Responsibilities

Key responsibilities

  • Providing the board with informed oversight of the organisation’s cyber-security strategy, resilience and information-risk posture
  • Ensuring cyber and information risks are properly identified, understood, owned by management and adequately managed — and bringing independent challenge to management’s assurances
  • Helping the board understand its most significant cyber exposures in business terms, and satisfy itself that investment and controls are proportionate to the risk
  • Supporting the board’s readiness for, and oversight of, cyber incident response and business continuity — providing steadiness and sound judgement rather than operational direction
  • Bringing board-level perspective on data governance, data protection and the security implications of new technology and AI adoption
  • Contributing as a full member of the board to strategy, performance oversight and constructive challenge, and serving on the audit or risk committee where relevant
  • Upholding independence and the standards of governance expected of a non-executive director
Qualifications

What we’re looking for

  • A senior career in cyber security or information risk (for example Chief Information Security Officer, CISO, or equivalent senior security leadership)
  • A credible, current understanding of cyber-security governance, information risk, and the regulatory and reporting expectations around them
  • The ability to operate at board level — oversight and challenge, not execution — and to communicate technical risk in terms the whole board can engage with
  • Independence, integrity, and the judgement to think beyond a single specialism as a full board member
  • Existing board experience is welcome; we will also consider first-time non-executives of the right calibre with a genuine appetite for governance
Job Benefits

Terms and commitment

This is a non-executive appointment on an initial three-year term, renewable by mutual agreement. The role carries a competitive non-executive fee, with directors’ and officers’ liability insurance and an indemnity in place. The time commitment is typically several days per quarter across board and committee meetings, preparation and occasional additional matters, with a number of meetings held in person on a hybrid basis.

Contacts

NED Capital is a founder-led board and non-executive search firm placing non-executive directors, committee chairs and board chairs across the UK. Every search is led personally by Adrian Lawrence FCA, a Fellow of the ICAEW and former listed-company finance director. All approaches are handled in strict confidence.

To apply for this role or to discuss board opportunities, please get in touch through our non-executive director recruitment service.

Prev
Non-Executive Director - ESG and Sustainability Oversight
Next
Non-Executive Director - Risk and Risk Committee
Employment Type
Part-time
Beginning of employment
1st November 2026
Duration of employment
3 years
Industry
Technology
Job Location
London, South East, United Kingdom
Working Hours
9-5
Base Salary
£18,000-£22,000 Per year
Date posted
September 18, 2026
Valid through
October 31, 2026
PDF Export
Export as PDF
Close modal window
Position: Non-Executive Director - Cyber Security and Information Risk

Loading...

Thank you for submitting your application. We will contact you shortly!