Chief Information Security Officer

Chief Information Security Officer (CISO)

LOCATION: London, United Kingdom

PACKAGE: £150,000 - £200,000, plus bonus, plus benefits and stock

Company Information:

My client is the People Analytics company, they make companies smarter, more secure and more successful by the software they have created. The company has offices in London, New York, San Francisco, Montreal and Singapore and employs industry leaders in compliance and regulation, sales and customer success, software and data science. 

My clients software reveals previously undetectable insights to protect reputation and maximize revenue generation by analysing vast amounts of structured and unstructured data.

My client is growing quickly and has ambitions to become the a platform to transform how companies and individuals evaluate, measure, and manage their performance. They are poised to triple their revenue each of the next two years, my client are backed by leading VC's and banks. They are building out a world class executive team to help them tackle this important mission.

Key Experience Required:

• Analytical


• Strategy-driven


• Hands-on


• Attention to detail


• Team Player


• Secure Software Development (application security)


• Secure Service Delivery (infrastructure security)


• Security standards, frameworks and certifications -SOC 2 (priority), ISO, OWSAP, NIST and ITIL


• Amazon Web Services stack (optional)


• Experience in designing and implementing security policies


• Managing security QA/ penetration testing


• Managing security attestation / audit projects – Managing SOC 2 audit is a plus


• Managing access control systems / IT assets


• Managing security software stack (IDS/IPS software, vulnerability scanning tools etc.)


• Managing security incidents


• CISO experience in a software company is a plus


• Professional certifications, such as a CISSP, SANS, CISA are a plus

Role Information:

• Design, implement, enforce and audit information security policies including but not limited to: systems and data access control, IT assets security, IT security surveillance, Secure Change Management, Secure Software development and 3^rd Party Security Management


• Analyse compliance with recognized security standards (ISO, NIST, ITIL, SOC etc) and own the elimination of non- compliance


• Ensure effective and efficient organization-wide access controls in accordance with best practices and industry-recognized frameworks (SSO, RBAC, least privilege etc)


• Develop a knowledge base of InfoSec policies and related processes


• Develop and implement a training program ensuring that all relevant personnel are aware of their InfoSec responsibilities and is capable of successfully performing them


• Build, train and enable a cyber security team supporting Information Security efforts on an ongoing basis


• The CISO will report directly to the Chief Technology Officer (CTO) and will have a mandate to develop the Information Security function and build the team to help protect the firm from information security risks