Head of Information Security (Fintech)

Location: Must be based in London, UK (Hybrid: 3 days in office, 2 days remote)

Fast-growing FinTech company building a secure and scalable financial platform.

What you will do

• Own the information security strategy, ensuring alignment with FCA requirements and ISO 27001 standards.
• Define and enforce security architecture across Azure-native and Kubernetes-based platforms.
• Lead threat modelling, vulnerability management, and incident response programmes.
• Govern security for AI and machine-learning systems, including data governance and model abuse defences.
• Represent security at the board level and manage regulatory engagements.
• Drive the firm's transition to post-quantum cryptography and crypto-agile migration.

Requirements

• Must have the right to work in the UK.
• Proven experience leading information security in a regulated financial services or fintech environment.
• Strong working knowledge of FCA regulatory requirements (SYSC, operational resilience).
• Hands-on experience with cloud-native security on Azure (Entra ID, Defender, Sentinel).
• Proven delivery of ISO 27001 certification or equivalent ISMS framework.
• Professional qualification such as CISM or CISSP.

Nice to have

• Background in software engineering (SDLC, DevSecOps).
• Familiarity with Kafka-backed event architectures.
• Experience with AI governance frameworks (NIST AI RMF, ISO/IEC 42001).
• Experience managing and developing security teams.

Culture & Benefits

• 25 days holiday plus bank holidays.
• 5% pension contribution.
• Private medical insurance with Vitality and health cash plan.
• Enhanced parental leave and Cycle to Work scheme.
• Monthly team lunches and quarterly company socials.