DWP Information Security currently not "fit for purpose"?

Whilst happily browsing through the latest posted jobs on the Civil Service Gateway, I couldn't help but spot and read the detail of this from the Department for Work and Pensions which is advertising for a "Head of Information Security and Compliance" role. The advert says,

We are seeking a talented individual who can provide the leadership and professional expertise to ensure that we develop and embed the fit for purpose frameworks across the organisation.

So they need someone to embed "fit for purpose frameworks across the organisation" by implication meaning that currently the department information security is not at all "fit for purpose".

Refreshingly honest of them I thought! Mind you, they did have an IS officer that was foced to send out the following email less than a year ago.