Padmi
Moneybox logo
Moneybox

wealth management · savings and investing

Head of Information Security

United Kingdom · HybridPosted 2 months ago
SecurityStaff+Full Time
Apply at Moneybox

Opens the source posting on jobs.lever.co

Source description

About the role

View original

Working closely with Engineering, Workplace Technology, Compliance, Legal, Risk, Product and senior leadership, this role will be responsible for:

Owning and delivering Moneybox’s information security strategy, roadmap and operating model.

Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk-management framework while aligning with ISO 27001 for governance, control maturity and assurance.

Reducing real security risk across Moneybox’s technology estate, people processes, suppliers and products.

Building an effective and focused security function that scales through prioritisation, tooling, automation and clear ways of working

Providing clear, practical security leadership to senior stakeholders, including regular reporting on security posture, risks, incidents and priorities.

Making proportionate, risk-based decisions that support business growth while protecting customers and the organisation.

Developing, maintaining and embedding practical information security policies, standards and procedures.

Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture.

Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively.

Overseeing vulnerability management, including scanning, remediation, patching and risk-based prioritisation.

Leading third-party security risk management for key vendors, partners and technology providers.

Defining and tracking security metrics that support risk reduction, delivery progress and decision-making

Partnering with Engineering and Product teams to ensure security is built into systems, services and ways of working.

Monitoring emerging threats, regulatory expectations and industry practice, then applying them pragmatically to Moneybox’s environment.

Continuously improving the security function in a way that is practical, proportionate and appropriate for Moneybox

More at Moneybox

Related open roles

View all roles