We are looking for a Lead Information Security professional to provide leadership and subject-matter expertise across the organization's information and cyber security function. The role involves shaping security strategy, influencing risk decisions, and ensuring security and resilience are embedded across technology, business, and third-party operations.
Requirements
- Extensive senior experience as an information security leader or senior information security professional in complex, regulated environments.
- Deep practical experience with ISO/IEC 27001 (ISMS design, implementation, and assurance).
- Strong experience with ISO 22301 and operational resilience frameworks.
- Demonstrable experience delivering or governing compliance with DORA.
- Strong understanding of FCA and PRA supervisory expectations related to cyber security, technology risk, and operational resilience.
- Experience with NYDFS Cybersecurity Regulation (23 NYCRR 500) or equivalent international frameworks.
- Proven ability to engage confidently with regulators and auditors.
- Strong ability to translate complex technical and regulatory issues into clear business risk decisions.
- Background in financial services, banking, insurance, payments, or other highly regulated sectors.
- Experience leading regulatory remediation, control uplift, or transformation programs.
- Exposure to cloud security governance and complex third-party ecosystems.
Benefits
- Hybrid working
- Matching 401K plan
- Medical, dental, vision, life, disability
- Generous time off (including parental leave)
- Continued support for professional development
- Gym subsidy
- My day (additional days leave for personal interests/wellness/charity work)