Head of InfoSec
Harbr, United Kingdom
Job Description
We’re currently in the middle of a really exciting period of growth here at Harbr. We’ve been around since 2017, but until May this year, we had been operating in stealth-mode while we focused on building the best product possible. In November 2020, 6 months after emerging from stealth, we announced our $38.5m Series A, led by Dawn Capital and Tiger Global. We’ve already started to onboard a series of exciting enterprise clients, and are looking to grow the team at lightning pace.
We're currently looking for a Head of InfoSec, to define and drive the implementation of the Company’s security strategy, protecting the business and its clients from security threats and cyber-hacking, in compliance with all Security standards and regulations. This is a hands-on role with a focus on engineering practices, customer confidence and operational compliance in a highly complex, ambitious, growing technology and data centric business.
Requirements
Team
This is a leadership role in the COO team which includes engineering, product, customer success and chief of staff leaders and functions.
Core Responsibilities
- Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management framework appropriate to the context of our business
- Support the engineering team in defining and promoting architecture and best practices that meets our stringent client expectations
- Contribute to the product evolution including supporting definition of roadmap items which enhance our secure offerings to clients
- Engage directly with clients to ensure confidence with our security approach, architecture and execution
- Address the security needs of prospects and customers, including driving security review processes during the sales lifecycle and leading any necessary security incident management with customers.
- Work directly with the rest of the organisation to facilitate risk assessment and risk management processes
- Champion and educate the organisation about the latest security strategies, technologies, risks, threats and best practices
- Define and manage all resources required to meet the agreed Security objectives
- Obtain and maintain external security accreditations
- Comply with the latest regulations and compliance requirements
- Own and maintain all information security policies and procedures
Expected Behaviours
- Execution oriented, hands on capabilities - not just theoretical. This is a startup!
- Highly collaborative, but also able to work autonomously
- Ability and openness to learn fast, sometimes in challenging circumstances
- Logical approach to problem-solving
- Take responsibility for getting things done (accountability)
- Comfort with navigating priorities among a broad set of responsibilities, and be able to lead or support others as necessary to achieve objectives across the business
- Able to communicate effectively with a wide range of client personas including infoSec, business owners and technical architects
- Simultaneously idealistic and pragmatic, with a willingness to learn from others and ask questions
Benefits
UK-based Employees
- Competitive compensation
- Company equity
- Generous paid time off (28 days excluding public holidays)
- Flexible work arrangements, including work from home and work from anywhere
- Life insurance from YuLife
- Workplace pension
- Perks and discounts programs
- Weekly team social activities
US-Based Employees
- Competitive compensation
- Company equity
- Generous paid time off (28 days excluding public holidays)
- Flexible work arrangements, including work from home and work from anywhere
- Insurance coverage from top carriers, including health, dental, vision and life insurance
- 401(k) retirement plan
- Perks and discounts programs
- Weekly team social activities