Head of Security
PensionBee, United Kingdom
Job Description
- Full-time - Moorgate, London / Remote
- 65,000-75,000, up to 10% annual cash bonus and up to 90% annual equity grant under the company’s bonus plan
For far too long, pensions have been difficult to understand. PensionBee is on a mission to fix things by making pensions simple and engaging. We do this by helping customers move into a modern, mobile pension with PensionBee. From a clear and simple transfer journey, to human support when only a human will do, we’re forever fighting for our customers!
PensionBee is looking for an individual with a passion for information security to lead the further development of its information security programme. Recently certified to ISO 27001, PensionBee has a solid grounding in information security, and this is an opportunity to join a company with a healthy attitude to security and champion the practice of continuous improvement in this area.
Requirements
Key Responsibilities
- Be the primary point of contact in the business for Information Security issues
- Ensuring ongoing compliance with ISO 27001 and other relevant certifications e.g. Cyber Essentials Plus, including monitoring, reporting and policy review
- Ensure our information security controls continue to suit the identified risks in the business, and work with internal teams to improve controls as risks or operations change
- Working with teams such as product, engineering and risk to guide decision making about information security, spread best practice and help with activities such as Data Protection Impact Assessments
- Coordinating company-wide training on information security, to continue embedding a security-conscious culture
- Taking on the role of Data Protection Officer, to provide a point of contact for individuals and the ICO and ensure ongoing compliance with GDPR
- Managing business continuity and disaster recovery plans and testing, including system backup and restore
- Managing and, where appropriate, appointing suppliers for security-related activities such as penetration testing and audit
- Contract review for information security and data protection concerns
Candidate Requirements
The key attributes and experience we are looking for are as follows:
- Experience performing responsibilities at a similar level in a technology-driven organisation. Experience in a regulated environment is not essential
- Enjoys a balance between the hands-on implementation of information security, policy and monitoring, and sees security as an enabler for a business to be more successful
- Experience with and/or relevant certifications in information security management systems such as ISO 27001, CISSP, CISM, GSEC
- Clear written and spoken English
We welcome all candidates and are proud to have been awarded Employer of the Year at the Financial Adviser Diversity in Finance Awards 2020. So if you have an interest in the role and are passionate about what we do, get in touch.
We want everyone to be able to access the same opportunity, and some people might need extra support to have this access. If there’s an adjustment we can make that would help you perform to the best of your ability during the application process, like booking in time for a longer interview, please let us know.
Benefits
- End of year bonus and generous equity schemes
- Fully remote working enabled environment and culture
- 25 days annual leave, 5 extra days for parents of children under 18 and generous parental leave
- Perkbox, UK Healthcare Cash Plan and Income Protection Insurance
- Regular company-wide sessions: CEO Session, Show amp; Tell and Lunch amp; Learn, giving you an opportunity to share your ideas and learn about other areas of the business
- A warm and motivated team working to make a real difference for our customers