Send your CV

    Attach a CV (Accepted file types: pdf, doc, docx, rtf.)

    Register your Interest

    Share your details and we’ll be in touch to explore how we can support your next step — whether fractional leadership, advisory work, freelance projects, or executive opportunities.

      Attach a CV of profile (Accepted file types: pdf, doc, docx, rtf.)

      From Title to Influence: What the UK Market Gets Wrong About CISO Hiring

      The role of the Chief Information Security Officer (CISO) is often misunderstood—by both candidates and companies. In a candid interview with the Cloud Security Alliance, Owanate Bestman lays out the real trends shaping CISO recruitment in the UK.

      With global experience placing senior cyber talent across sectors, Owanate explains:

       

      • Why job titles can be misleading
        “Head of Security” and “CISO” are often used interchangeably—yet they carry vastly different expectations and perceptions. In some cases, Heads of Security hold more weight than CISOs, depending on industry, regulation, and internal structure.
      • Why not every organisation needs a CISO
        Of the UK’s 8,250 companies with over 250 employees, only a fraction truly require board-level security leadership. Understanding when a business needs a CISO versus a Security Manager is key to hiring the right level.
      • Where the CISO should sit
        Reporting lines vary globally—yet in the UK, too many CISOs still report into the technology function, limiting their independence. In more mature markets like the US, CISO roles more commonly report directly to CEOs, CFOs, or Chief Risk Officers.
      • The importance of business fluency
        “The best CISOs I know,” says Owanate, “aren’t security people working in a business—they’re business people working in security.” He stresses the value of financial literacy, stakeholder management, and understanding the broader commercial context.
      • Advice for aspiring CISOs
        Owanate encourages cyber professionals to focus both on strengths and blind spots—doubling down on technical advantage, while building out business acumen. He recommends aspiring leaders practice “the art of ‘so what’”—linking security decisions to business impact.

      “Security is still seen as a blocker in many organisations. Great CISOs know how to reframe the conversation—educating the business on why security matters, and how it links to their success personally and commercially.”
      — Owanate Bestman

       

       

      Watch the Full Interview: Click here to view the full video

      Back to Publications