Head of Information Security

• Join Moneybox, the award-winning UK wealth management platform, in a senior hybrid leadership role based in London. • Report to the Engineering Director and own Moneybox’s Information Security Programme. • Reduce security risk across people, systems, products and third parties as the business scales. • Build a small, nimble, high-performing security function powered by technology, automation and AI. • Combine strategic direction and senior influence with hands-on delivery. • Take a pragmatic, commercially aware approach rather than copying a big-bank security model. • Visit the London office by the Oxo Tower 2 days a week.

• Bring proven experience leading or significantly contributing to an information security function. • Show strong working knowledge of risk-based security management and the NIST Cybersecurity Framework. • Bring experience developing and delivering security strategy, roadmaps, policies and controls. • Understand identity and access management, SIEM, endpoint security, cloud security and vulnerability management. • Show experience using technology, automation or AI to improve security outcomes or efficiency. • Bring experience managing security risk in cloud-based environments. • Understand third-party security risk management. • Show experience planning, testing and improving incident response. • Report security risks, controls and metrics clearly to senior management. • Understand financial services security, risk and regulatory expectations. • Bring excellent written and spoken English. • Be based in the UK and work from the London office 2 days a week.

• Bring experience managing security in Azure environments. • Show experience aligning a security programme with ISO 27001. • Bring experience managing the security risks of AI adoption, such as shadow AI and data exposure. • Show experience building a security function from a small base in a scale-up.

• Own and deliver the information security strategy, roadmap and operating model. • Develop the Information Security Programme using NIST CSF while aligning with ISO 27001. • Reduce real security risk across the technology estate, people processes, suppliers and products. • Scale the security function through prioritisation, tooling, automation and clear ways of working. • Report on security posture, risks, incidents and priorities to senior stakeholders. • Make proportionate, risk-based decisions that support growth while protecting customers. • Develop and embed practical security policies, standards and procedures. • Lead security awareness and training to strengthen security culture. • Own the incident response framework and oversee vulnerability management. • Lead third-party security risk management for key vendors and partners. • Partner with Engineering and Product to build security into systems and services. • Track emerging threats and regulatory expectations, and apply them pragmatically.

• Build a security function that fits Moneybox, with real influence at senior level. • Receive a competitive remuneration package, company pension and bonus scheme. • Work in a hybrid setup with 2 days a week in the London office. • Get a home office furniture allowance and a personal annual learning budget. • Get private medical insurance and a health cash plan for dental and optical costs. • Join the cycle to work scheme and get a Wellhub subscription for gyms and wellbeing apps. • Benefit from enhanced parental pay and leave. • Enjoy 25 days’ holiday plus bank holidays, with extra days added for length of service.

Moneybox is an award-winning wealth management platform on a mission to give everyone the means to get more out of life. It helps over one and a half million people build wealth throughout their lives, whether they are saving and investing, buying their first home or planning for retirement. Moneybox believes wealth is about the means to more freedom, opportunities and peace of mind.