I think the job title is misleading, from the job listing:
> We are looking for an experienced Head of Cyber Security to lead a team of two cyber analysts
> We are a team of around 40, responsible for the Treasury’s technology, security and knowledge and information management services.
So it's not _the_ Head - but _a_ head, and that 'head' has a relatively minor / junior manager role.