Head of Information Security

Job Description

Airtime Rewards are delivering the leading data-led rewards technology globally. We believe every shopper should feel great about their daily spend.Our app is loved by our members (>2m!) and were continually building new features that drive towards our vision that sees hundreds of millions of pounds saved on phone bills.Alongside this, we work with some of the best-known retailers to revolutionise their performance marketing. Were giving them brand new information and insight that transforms their understanding of their customers.We do all this with our cutting-edge proprietary technology, utilising real time purchase data and AI learning to delight our members and maintain relationships with >200 retailers (including Boots, Greggs, and Tesco to name a few!).Its a simple, best-in-class experience.We pride ourselves on culture, are solving new problems and need great people to join us on our international journey as we deliver the leading data-led rewards technology globally.Were looking for a Head of Information Security to join the Technology team and help us redefine the future of rewards. Working closely with our Director of Technology, youll be at the forefront of our Security efforts and be fully responsiblefor the definition and delivery of our overall strategy across three core pillars of security including: Governance, Risk & Compliance; Product & Platform Security; and Security Operations.Information security is a growing team and therefore the successful candidate will (on occasion) also be required to roll up their sleeves and be hands-on. Over time, as you mature the function, your role and focus will evolve - this is your chance totransform along with a growing business.Responsibilities

• Provide information security leadership for a fast-paced, high-growth business.
• Set the security strategy, direction and vision and building a network of stakeholders (at all levels) to support it.
• Implement appropriate security governance & controls for technology & business initiatives.
• Work with the leadership team and Board regarding operational risks and / or compliance issues.
• Lead or support ongoing security & compliance initiatives, including PCI-DSS and GDPR.
• Work with external auditors to meet security standards, particularly PCI-DSS.
• Establish, monitor and enforce information security standards.
• Recruit, lead, motivate, develop and manage the performance of direct reports and influence others in the wider group to develop a high performing security capability.
• Ensure an information security management system is in place including appropriate policies, standards, and governance for security across the business.
• Proactively engage with product & software engineering teams to ensure that security requirements are identified and prioritised throughout the software development lifecycle.
• Build employee security engagement, education and awareness through formal and informal initiatives.
• Support incident and root cause analysis for all events that degrade the security, availability, performance of our products and platforms.
• Manage relationships with third party security providers, and running procurement rounds when necessary.

Skills

• Experience in setting security strategy and direction and presenting and influencing at Exec level.
• Experience working in a regulated and externally scrutinised business (Fintech preferred)
• Experience working closely with internal and external auditors ensuring policies (i.e. PCI-DSS) are adhered to.
• Experience working in a fast-paced, cloud & engineering-focused business and influencing technology | engineering leadership & communities.
• Experience driving alignment and demonstrating progress against security best practice and industry standards such as the CIS Controls, Cyber Essentials, ISO27000, PCI-DSS and GDPR.
• Experience in the selection and management of 3rd party security suppliers.
• CISM, CISSP, CISA or other relevant security certifications would be advantageous.

Keyskills :
FirewallsCISSPInformation SecuritySecurity ManagementINFOSEC