Назад
Company hidden
10 дней назад

Interim Security Manager (3-Month Contract)

Формат работы
remote (только Europe)
Тип работы
project
Грейд
lead
Английский
b2
Страна
UK/Ireland
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Interim Security Manager (3-Month Contract) (AWS/SaaS Security): Managing day-to-day security operations, cloud alerts, endpoint findings, incident response, compliance evidence, and third-party security reviews with an accent on AWS security, risk assessment, and operational stability. Focus on investigating alerts, leading incident response, building practical security runbooks, mapping critical services and dependencies, and strengthening security ownership across engineering teams.

Location: Ireland, Northern Ireland, UK; remote work is possible.

Company

hirify.global Software develops salon management software and related applications for hair and beauty businesses, processing appointments, bookings, messages, and custom mobile applications across international markets.

What you will do

  • Own day-to-day security operations and act as the first point of contact for security and infrastructure questions.
  • Monitor and triage AWS GuardDuty, CloudWatch, endpoint protection, and IT security alerts through investigation and resolution.
  • Manage AWS WAF and related controls for public-facing services, responding to unusual traffic and abuse.
  • Monitor threats and vulnerabilities, including compromised third-party packages, and coordinate remediation with engineering owners.
  • Lead incident response, escalation, communication, and business continuity updates.
  • Review third-party tools, support compliance activities, provide threat-modelling input, and coach IT, security, and infrastructure colleagues.

Requirements

  • Proven information security or cybersecurity experience with at least 2 years of people or team leadership experience and the ability to work with minimal onboarding.
  • A recognised security qualification such as CISSP, CISM, or Security+, and/or equivalent hands-on experience.
  • Strong AWS security knowledge, including GuardDuty, WAF, CloudWatch, IAM, and Service Control Policies.
  • Experience running security detection, triage, and response using tools such as EDR, antivirus, and vulnerability scanners.
  • Experience planning and leading incident response, with clear escalation and calm communication under pressure.
  • Experience contributing to PCI DSS, ISO 27001, HIPAA, and GDPR compliance programmes, including audit evidence and client-facing security material.
  • Familiarity with secure SDLC and software supply chain risk, including dependency vulnerabilities.
  • Ability to explain technical risk to non-technical colleagues, build trust quickly, and influence Engineering, IT, and Product without formal authority.
  • Pragmatic, proactive, curious, and engaged with the security community.

Nice to have

  • PCI DSS v4.0 or later experience.
  • Previous interim or contract security leadership experience, including structured handovers.
  • Experience in SaaS businesses with remote-first engineering teams.
  • Threat-modelling experience for products handling payments or financial data.
  • Experience with vulnerability and attack surface management, penetration testing, remediation, VPN, endpoint management, and web application firewall configuration.
  • Experience using AI tools for security monitoring, triage, or vulnerability tracking.

Culture & Benefits

  • Three-month contract with flexi-time, working from home, and remote work possible.
  • Private healthcare, Wellness Days, an employee assistance programme, and online GP access.
  • Employee Share Purchase Scheme, pension, life assurance, income protection, and transport benefits.
  • Enhanced maternity and paternity benefits, plus leave for fertility treatment, pregnancy loss, and menopause.
  • Learning and development programmes, LinkedIn Learning, online resources, and three moving days.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →