Head of Information Security

About the role

We are looking for a hands‑on Head of Information Security to build and scale our security, privacy and resilience capabilities across the business. The role combines strategic leadership with operational delivery, working closely with Technology, Product, Legal and senior leadership to protect customer trust while enabling growth.

Key responsibilities

• Define and lead the overall security strategy and roadmap.
• Establish governance, compliance frameworks and ensure adherence to GDPR, PCI‑DSS and other regulations.
• Strengthen cloud (AWS) and third‑party security controls.
• Drive incident response, resilience planning and continuous improvement of security processes.
• Partner with Engineering, Product, Legal, Finance and Operations to embed security into product and business decisions.

Required profile

• 10+ years of experience in information security, including senior leadership responsibilities.
• Proven track record of building and scaling security and privacy programmes in fast‑growing organisations.
• Hands‑on knowledge of GDPR, PCI‑DSS, incident response and resilience planning.
• Experience working in cloud‑first environments, preferably AWS.
• Strong stakeholder management and executive communication skills.
• Collaborative, pragmatic approach balancing security with business delivery.

Required skills

• GDPR
• PCI‑DSS
• Incident response
• Resilience planning
• AWS
• Cloud security
• E‑commerce security
• Fintech security
• Privacy programme development

What we offer

• 25 days holiday, increasing by one day each year for the first five years.
• Matched pension scheme.
• Paid parental leave.
• Flexible, inclusive workplace culture that supports work‑life balance.