Job Description

EC1 Partners are exclusively partnered with a VC Backed - UK consumer lender who are looking for a Head of Information Security following on from their recent Series B funding.

This is a greenfield, hands on role, you will be responsible for building out the organisations cybersecurity from scratch. It is an excellent opportunity for someone looking to take the next step in their career.

Your role responsibilities include:

Own and manage the cyber programme book of work
Oversee the implementation of security certifications, such as ISO27001, SOC2 and Cyber essentials.
Develop and execute a comprehensive security strategy aligned with our business goals and industry standards
Oversee the security monitoring of our cloud infrastructure, applications, networks and endpoints
Establish and enforce policies and procedures for access control, encryption, backup, disaster recovery, incident response and risk management
Lead the security awareness and training programs for our employees, partners and customers
Coordinate and conduct security audits, assessments and penetration tests
Prepare the organization and staff for external inspections
Manage the security budget and vendor relationships
Stay updated on the latest security trends, threats and best practices

Who you are:

At least 8 years of experience in cyber security, preferably in the financial sector or other industries that handle large volumes of sensitive data.
A proven track record of designing and executing security strategies and frameworks that align with business objectives and regulatory requirements.
Experience in the role-out of policies to attain security certifications, e.g. ISO27001, SOC2 and Cyber essentials
Strong leadership and communication skills, with the ability to build and manage a team of security professionals and collaborate with other stakeholders across the organization.
Expert knowledge of AWS security features and tools, such as AWS WAF, AWS GuardDuty, AWS Security Hub, etc.
Expert knowledge of Microsoft Entra / Azure AD and managing endpoint security policies for a zero-trust workplace
Familiarity with SOC, SIEM and SOAR services to deal with managed services providers
A relevant certification, such as CISSP, CISM, CISA, or equivalent.

Ec1 Partners

About Us

New Jobs

Head of Info Sec