Head of Information Security

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Take charge of security at Fanvue as the Head of Security.

• Establish the security roadmap and guide the priorities of the technical security lead.

• Determine access rights for various roles and teams, ensuring maintenance over time.

• Collaborate with the People team to create processes for joiners, movers, and leavers.

• Develop security policies and conduct regular access reviews.

• Convert access decisions into technical measures in collaboration with the technical security lead.

• Approve vendors, tools, and AI applications prior to their access to company data.

• Keep a current register of third-party vendors.

• Perform security due diligence on payment and platform partners.

• Lead the certification journey for SOC 2 and ISO 27001.

• Manage the security risk register and provide reports to the executive team.

• Oversee responses to security incidents, while engineering incidents and on-call responsibilities remain with the Engineering team.

• Conduct company-wide training on security awareness.

• Build and expand the security team as the function evolves.

• Assume responsibility for the daily security management of Google Workspace, Okta, and 1Password.

• Review access for every role and team within a three-month timeframe.

⛳️ Requirements

• Proven experience managing security at a head-of level, demonstrating a strong record of achievement.

• Strong skills in governance, access management, and process development.

• Ability to gain credibility with engineers to facilitate coordination of technical tasks.

• Capacity to drive priorities across departments until objectives are met.

• Practical approach to maintaining controls without hindering business operations.

• Ability to effectively communicate risks to non-technical teams and executives.

• Experience in payments, fintech, or high-risk platforms is highly advantageous.

• Familiarity with delivering SOC 2 or ISO 27001 is a significant plus.

• An AI-forward mindset and the use of AI tools within workflows.

🏝️ Benefits

• Fully remote work environment.

• Unlimited paid time off (PTO).

• Flexible working hours.

• Access to London office and WeWork spaces.

• Salary reviews conducted every six months.

• Budget for travel and office expenses for team off-sites or home office setup.

• Comprehensive benefits package that includes gym memberships and applications.

• Direct communication line to the executive team.

• Recognition as a Sunday Times Best Places to Work.