Curve was founded with a rebellious spirit, and a lofty vision; to truly simplify your finances, so you can focus on what matters most in life.

That’s why Curve puts your finances simply at your fingertips, so you can make smart choices on how to spend, send, see and save your money. We help you control your financial life, so you can go out and live the life you want to live.

With Curve you can spend from all your accounts, track spend behaviour and provide insights, and security to protect you from fraud. For the first time giving you bright insights and control of all your money in one beautiful place.

We’re developing a ground-breaking product with our customers at the core. Our user base is growing rapidly and we have exceptional metrics. We have funding from the leading names in tech investment, and a visionary leadership team who wants everyone who joins this remarkable adventure, to have the autonomy to masterfully develop their expertise.

Welcome to Curve. On a mission to help you live inspired.

The Chief Information Security Officer (CISO) will own and develop Curve’s cyber security domain, ensuring that information assets and technologies are adequately protected. The CISO will oversee and direct all aspects of cyber security, risk management, and compliance efforts, working closely with stakeholders to mitigate risks and align security initiatives with business objectives.

The role will be closely aligned to the Technology function and the CISO will also have a reporting line to the COO function to assure decision making and prioritisation.

Key Accountabilities:

Security Strategy and Leadership:

Build and execute a company-wide cyber security strategy and roadmap detailing how cyber security delivers outcomes, to measurably improve the protection of the business from credible threats.
Identify security vulnerabilities and risks associated with Curve's operations, including partnering with business units to build threat assessment into the product design and engineering processes, and to integrate good security practices into the business
Serve as a trusted advisor to executive leadership and the whole business on security trends and risk factors, providing meaningful guidance about threats, security and risk posture.

Risk Management and Compliance:

Manage and coordinate internal and external network risk assessments, vulnerability assessments, penetration tests and auditing (including PCI & SOC2), as well as third party risk management and supplier due diligence
Responsible for developing and managing Curve’s cyber and information security programme, including the maintenance of existing policies, procedures, standards and guidelines and the introduction of new policies and controls to reflect changes in technology and regulatory and industry standards (e.g., GDPR, CCPA, ISO 27001, NIST, etc.).

Incident Response and Management:

Oversight and continuous improvement of the incident response programme, ensuring swift and effective handling of security issues including resolution and subsequent root cause analysis.
Lead forensic investigations and provide insights on security events to key stakeholders.
Develop and test business continuity and disaster recovery plans.

Technology and Programme Oversight:

Champion new technologies and enforce the best development patterns and secure working practices, including providing guidance to the product and engineering teams for secure product development.
Manage the evaluation, selection, procurement and implementation of information security technology and tools.
Oversee the security awareness training programme for employees.

Team Building and Leadership:

Foster a culture of security awareness across the organisation.
Ability to lead, motivate and develop a cross functional, interdisciplinary team to achieve both tactical and strategic goals.
Maintaining a positive and solution-oriented approach to work, providing open and honest feedback

Skills & Experience:

You will have at least 3-5 years experience in a senior Cyber security role and have designed and/or executed a cyber strategy and represented security in C-suite decision making.
Firm technical and practical understanding of information security best practices such as NIST, ISO 27001, Open Web Application Security Project (OWASP)
Develop and lead a vulnerability management programme, and the ability to assess and score vulnerabilities in environments similar to Curve’s.
Have a relevant industry recognised certification such as; CISSP, CIPP/E, CISM, CRISC or CISA.
Understands and keeps up to date working knowledge of the internal & external threat landscape.
Develop, deploy and lead security compliance strategy to ensure compliance with SOC2, GDPR, PCI DSS, local privacy laws, contractual requirements and globally-recognised standards and guidelines.
Experience building incident response and management frameworks.
Understands the overall business architecture and how 3rd parties contribute to the Cyber Security landscape.
Extensive experience managing third party information security risk, managing the third party information security capability and vetting new suppliers.
Experience designing and auditing networks, services and mobile applications.
Security Architecture and Assurance - Design assurance reviews and driving improvement, risk identification and mitigation design, assurance processes and procedures.
A proactive and a natural collaborator, who can be hands-on ,with a desire to help and support the business achieves its objectives along with shared goals.
Effective influencing skills – providing context & direction, getting buy-in from multiple stakeholders, monitoring performance, motivating staff and building a positive working environment

Benefits:

25 days plus bank holidays
Bonus days off for Learning & Development, Mental Wellbeing, Birthday, Moving House & Christmas
Working abroad policy (up to 60 calendar days per year)
Bupa Health Insurance (YuLife)
Life insurance powered by AIG (5x Annual Salary)
Pension Scheme powered by “People’s Pension” (4% Matched)
EAP (Mental health & wellbeing support, Life coach, Career coach)
24/7 GP access (Smart Health via YuLife)
Annual subscriptions to Meditopia & FIIT for your mind and body (via YuLife)
Discounted shopping vouchers (via YuLife)
Enhanced parental leave
Ride to work scheme & Season ticket loan
Electric car scheme
Six nights of Night Nanny for new parents
Free Curve Metal subscription for you and your +1

Curve jobs

CISO