Information Security & Cyber Security Manager (CISO track)

About the role

This is a unique opportunity to join a fast‑growing UK fintech as its first full‑time information security leader. Reporting directly to the CTO, you will design, implement and own the entire security and cyber‑risk framework, positioning yourself for a future CISO role.

Key responsibilities

• Define and maintain information security controls and governance.
• Deliver information and cyber security assurance across the organisation.
• Ensure FCA compliance and regulatory security requirements are met.
• Lead Identity & Access Management using Microsoft Entra ID, Conditional Access, PIM, Intune, M365 and AWS IAM.
• Develop cyber security strategy, risk management and cloud security (AWS).
• Manage third‑party risk and supplier assurance programmes.
• Oversee operational resilience, incident response and security awareness culture.
• Coordinate penetration testing and vulnerability remediation.

Required profile

• Proven experience in information security, cyber security, technology risk or security governance.
• Background in FCA‑regulated financial services.
• Strong knowledge of ISO 27001, NIST and CIS Controls.
• Deep understanding of Microsoft Entra ID and AWS security models.
• Hands‑on experience with access reviews, risk assessments and supplier assurance.
• Excellent stakeholder management and communication skills.

Required skills

• ISO 27001
• NIST
• CIS Controls
• Microsoft Entra ID
• Conditional Access
• Privileged Identity Management
• Intune
• Microsoft 365
• AWS IAM
• AWS
• Penetration Testing
• Identity & Access Management
• Cloud Security
• Third‑Party Risk Management
• Incident Management