Info Gov

The UK Cyber Security Council has appointed Giles Grant as its new Chief Executive Officer, marking a significant leadership change for the UK’s independent professional body for cyber security. Grant will take up the role on 2 March, following an extensive recruitment process at the end of 2025.

Grant brings more than two decades of senior leadership experience across global professional bodies and information services. Most recently Executive Director at the Institute of Engineering and Technology (IET), he oversaw a £50m international portfolio spanning membership, digital learning and community engagement. His background includes driving strategic growth, strengthening professional communities and leading large scale organisational transformation.

Frances Le Grys, Chair of the Council’s Governance & Nominations Committee, said the appointment comes at a pivotal moment for the organisation.

“We are delighted to welcome Giles as our new CEO. He brings a wealth of senior leadership experience, with a strong track record of fostering growth and building engaged and exciting professional communities,” she said.

“Giles has a proven ability to bring together diverse stakeholders to drive change and deliver impact. This is exactly the leadership we need as we continue to connect, champion and charter the UK’s cyber security sector.”

Grant said he was “extremely excited” to take up the position, emphasising the importance of a trusted and professionalised cyber workforce to the UK’s economic and national resilience.

“The UK depends on access to a qualified and trusted cyber security profession. The UK Cyber Security Council’s role as an independent professional body is vital to the continued growth and development of the sector,” he said.

“I’m looking forward to working closely with our community of professional registrants, licensed bodies, corporate partners, Government and other stakeholders to grow and empower the UK’s cyber workforce. There’s so much we can do together to embed professional standards, bring more people onto the Professional Register and open up clear and accessible routes into cyber.”

The Council, awarded Royal Charter status in 2022, is responsible for setting professional and ethical standards for the cyber security sector and maintaining the UK’s Cyber Security Professional Register. Grant’s appointment follows a period of notable growth for the organisation, which recently surpassed 1,000 registrants.

Alongside this milestone, the Council has launched the Cyber Access Network, an initiative aimed at supporting individuals exploring careers in cyber and introduced a new Associate Professional Title to complement its existing Practitioner, Principal and Chartered designations.

The Council said Grant’s appointment reflects its continued focus on strengthening the UK’s cyber security community, embedding professional standards and supporting a skilled and trusted workforce.

Also in this section

Sep 11, 2026

Anthropic discloses fourth incident of AI model attacking real systems and hands investigation to independent evaluation organisation

Anthropic has published details of four incidents in which its Claude models gained unauthorised access to real third-party systems during cybersecurity evaluations, downloading and modifying user records at a real company, reading the personal information of an individual, harvesting credentials and accessing a security vendor's live database, after the test environments were mistakenly…
Sep 10, 2026

Welsh environmental watchdog hit by data breach

Environmental regulator Natural Resources Wales (NRW) has reported itself to the Information Commissioner's Office after a data breach saw personal details of staff made public.
Aug 24, 2026

Ministers seek power to ban tech risky vendors from critical sectors and bar recipients from discussing the order

The government has tabled amendments to the Cyber Security and Resilience (Network and Information Systems) Bill that would allow the Secretary of State to direct operators of essential services, data centres, managed service providers and other designated organisations to stop buying from, restrict the use of, or remove and disable products from a named vendor on national security grounds, with…
Aug 12, 2026

ACRO Criminal Records Office reprimanded by ICO following cyber security failings

The Information Commissioner's Office (ICO) has urged organisations to strengthen “patching and security monitoring processes” after cyber security failings at ACRO Criminal Records Office left the personal information of up to ten-thousand people, including some individuals’ sensitive data, potentially exposed.
Aug 06, 2026

AI agents sent malicious files to real developers and planted prompt injections in unmonitored test: AISI

The AI Security Institute (AISI) has published an incident report disclosing that AI agents under evaluation in its research environment took sustained, unsanctioned action against real people and organisations on the live internet, including researching the human maintainers of an open-source project, creating fake online identities to pressure one of them into approving malicious code, and…
Aug 05, 2026

Third AI platform goes rogue during cyber testing

The AI Security Institute (AISI) has reveaked a security incident in which AI agents being evaluated for their cyber capabilities took sustained, unsanctioned action directed at real people and organisations, including an attempted supply-chain attack on a publicly used open-source software project.

InfoGov Masthead Newsletter 800