Zinc is scaling fast, and we need our InfoSec function to keep pace. Your first 90 days are about understanding what good looks like at our stage and mapping the path to get there.
AI security governance
Zinc is AI-native, which is an opportunity and a responsibility. You'll be in the room with our COO and AI lead regarding adoption decisions from day one.
Incident management ownership
you're the lead on any material incident. Not managing every P3/P4, but the name at the top of the escalation when it matters. Set up the playbooks, own the response.
Building the function
you'll have one direct report, our InfoSec Manager. Your job is to define what this function needs to look like in 2-3 years, and start executing.
Information security strategy
defining and owning the multi-year roadmap
Security architecture
reviewing and advising on technical design decisions, embedding security by design across products and platforms
Risk management
maintaining the risk register, identifying, prioritising, and tracking the things that actually matter
Compliance programmes
ISO 27001, SOC 2, and relevant sector standards; in close partnership with our Compliance team
Incident management
owning major incident response; first port of call in a crisis
AI security governance
partnering with our AI & Automation lead on safe AI adoption at Zinc