Lead the SARC Team: Act as the hands-on leader for our security and compliance efforts, with a heavy focus on cyber security and risk management.
Technical Defense: Oversee security-by-design in our product development, incident management, and business continuity testing.
Audit Mastery: Lead both internal and external audits (like ISO 27001), ensuring we aren't just compliant, but constantly improving.
Incident Commander: Take the lead on Major and High category incidents, overseeing the robustness of our disaster recovery processes.
2nd Line of Defense: Identify, document, and manage risks across the entire business.
Tooling Ownership: Own and maintain our internal security tools, including platforms like Drata.

5+ Years of Experience: You’ve implemented security controls at scale, from data security to wider organizational protection.
Cloud Security Native: You have strong cloud security experience and can take a "red team" approach to stress-test our systems for threats.
ISMS Expertise: You have practical experience with ISO 27001 frameworks and hold relevant certifications like CISM to prove it.
Problem Solver: You can identify and explain complex security threats (both physical and cloud-based) to senior execs or the board.
Scale-up Mindset: You thrive in fast-paced environments where you need to deliver and implement things directly.

Competitive salary & share options
grow your career as we grow
Quarterly in-person meetups and team events to celebrate wins and shape what’s next
Private health cover with Vitality, plus a range of insurance benefits for peace of mind
34 days annual leave
because rest matters
5% matched pension contribution
invest in your future
Enhanced family leave and real support when returning to work

Security and Compliance Lead

Key skills