Head of IT and Internal Security

About the role

We are seeking a strategic leader to define and deliver the global internal IT and security strategy that enables Beyond to scale securely, efficiently and reliably. This senior position will shape technology, design and human behaviour across our worldwide operations.

Key responsibilities

• Define, own and continuously evolve the global internal IT and security strategy, aligning it with business priorities, growth and M&A activity.
• Lead planning, integration and change‑management of acquired businesses into Beyond’s technology estate, ensuring seamless transitions.
• Oversee design, implementation and improvement of internal IT infrastructure, including SaaS platforms, end‑user computing, collaboration tools, networking and workplace technology.
• Develop, implement and maintain information security policies, governance frameworks and operational controls to protect systems, data and intellectual property.
• Ensure compliance with ISO 27001, ISO 9001, ISO/IEC 20000‑1, ISO/IEC 42001, Cyber Essentials Plus, SOC 2, UK GDPR and related certifications, leading audits and remediation.
• Consolidate legacy certifications into a single Integrated Management System while maintaining standalone public‑sector certifications.
• Own the global IT operating budget, vendor relationships and technology procurement, delivering value and scalability.
• Lead business continuity, disaster‑recovery and incident‑response planning, regularly testing organisational resilience.

Required profile

• Proven senior leadership experience in global IT and information security.
• Track record of successful integration of technology estates following acquisitions.
• Deep understanding of regulatory and certification requirements for large enterprises.
• Strong budgetary and vendor‑management capabilities.
• Experience driving business continuity, disaster‑recovery and incident‑response programmes.

Required skills

• SaaS platforms
• End‑user computing
• Collaboration technologies
• Networking
• Workplace technology
• Information security policy development
• ISO 27001
• ISO 9001
• ISO/IEC 20000‑1
• ISO/IEC 42001
• Cyber Essentials Plus
• SOC 2
• UK GDPR and data‑privacy compliance
• Risk assessment
• Business continuity planning
• Disaster‑recovery planning
• Incident‑response management
• Vendor management
• Technology procurement
• Data Transfer Agreements
• Role‑Based Access Control