5 jobs found

Head of Security page is loaded Head of Securitylocations: United Kingdom - Swindontime type: A tiempo completoposted on: Publicado hoyjob requisition id: JR019614Dé un paso adelante y deje que Edenred le sorprenda.Cada día, ofrecemos soluciones innovadoras para mejorar la vida de millones de personas, conectando a empleados, empresas y comerciantes de todo el mundo.Sabemos que hay cientos de formas de que crezcas. Con nosotros, ampliarás tus habilidades en un entorno multicultural, desafiante y dinámico. Atrévase a unirse a Edenred y prepárese para prosperar en una empresa global que le ofrecerá un sinfín de oportunidades. En Edenred todo gira en torno a la meritocracia. Vienes como eres y contribuyes. De hecho, el Grupo Edenred reconoce, contrata y desarrolla todos los talentos y singularidades.Nos comprometemos a evitar toda forma de discriminación y a ofrecer a todos nuestros candidatos igualdad de oportunidades independientemente de su sexo y expresión de género, discapacidad, origen, creencias religiosas y orientación sexual o cualquier otro criterio. Head of Information Security - PayTech Location: Swindon/London Type: Full-time, Senior Leadership Role About PayTech: Join PayTech, a leading FinTech company within the Edenred group, committed to securing innovative payment technologies and protecting critical customer and company data. We are looking for an experienced and strategic Head of Information Security to lead and advance our security posture in a fast-evolving technological and regulatory landscape. Role Overview: As the Head of Information Security, you will be a senior leader responsible for defining, implementing, and maintaining PayTech's information security strategy. You will protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements. Key Responsibilities: Lead the PayTech Information Security function with alignment to Edenred's wider cyber risk management strategy. Develop and enhance security policies, standards, and procedures across the organisation. Manage the information security risk program, maintaining a comprehensive risk register. Oversee AI/ML security risk management, including the development of policies for generative AI technologies. Collaborate with Financial Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime. Manage third-party security risk due diligence programs. Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs). Drive cyber awareness programs and phishing simulations to embed a security-aware culture. Manage security incident response planning and coordinate with Security Operations Centre (SOC). Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program status and risks. Lead a team of approximately 6 security professionals. Qualifications & Experience: Solid experience senior information security leadership roles. Proven hands-on experience managing PCI DSS and other compliance programs. Experience in complex corporate structures with multi-stakeholder compliance demands. Strong background in developing security governance frameworks and policies. Experience with financial services, FinTech, or payments sector preferred. Familiarity working with financial crime, fraud, and AML functions. Experience managing risks associated with emerging technologies like AI/ML. Desired Certifications: CISSP (Certified Information Systems Security Professional) - highly desired CISM, PCIP, ISA, or QSA qualifications are advantageous. Skills: Strong leadership and mentoring capabilities. Deep technical knowledge in network security, cryptography, IAM, and cloud security (AWS, Azure, GCP). Excellent communication skills, able to convey complex security topics to non-technical stakeholders. Pragmatic, calm, and resilient under pressure during incident management.Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies and data, contribute to innovative AI risk frameworks, and help shape the future of PayTech's secure growth. Apply now and Vibe with Us!

Security Compliance Officer Location: Colchester - Essex - must be commutable Sector: Software & IT Services NO VISA SPONSORSHIP - MUST HAVE VALID RIGHT TO WORK A leading software and IT services company is seeking a Security Compliance Officer with experience in Cyber Essentials and/or Cyber Essentials Plus to take ownership of security compliance and certification activities across both internal systems and client environments. This is a key hire within a growing technical organisation where cybersecurity assurance, governance, and compliance are increasingly central to customer delivery and commercial growth. Key Responsibilities Lead and manage Cyber Essentials and Cyber Essentials Plus (CE+) assessments and certification activities Maintain and improve compliance with key frameworks including ISO 27001, GDPR, and internal security policies Conduct internal security audits, control reviews, and risk assessments Support evidence collection and audit readiness across technical teams Work closely with IT support, DevOps, and engineering teams to ensure security controls are implemented and maintained Handle client-facing security questionnaires and compliance requirements Assist in improving the organisation's overall security posture and governance framework Required Experience Experience working with Cyber Essentials and/or Cyber Essentials Plus frameworks and assessments Strong understanding of Cyber Essentials / Cyber Essentials Plus requirements Experience in information security, compliance, GRC, or IT security roles Familiarity with ISO 27001 or similar security frameworks Experience working with technical teams (MSP, software, or IT environments preferred) Desirable IASME Cyber Essentials Assessor/Auditor qualification ISO 27001 Lead Auditor or Implementation experience CISSP, CISM, CISA, or equivalent certifications Experience within MSP, SaaS, or software delivery environments Exposure to client-facing compliance or consultancy work What's on Offer Hybrid working (Essex-based office with flexibility) Opportunity to own and shape security compliance in a growing technical business Exposure to both internal security operations and external client compliance requirements Strong career progression into GRC, Security Manager, or Head of Compliance roles

Lead Auditor x2 +Permanent opportunity +Hybrid working - Corsham / West Country +SC / DV clearance is essential We are looking for experienced Lead Cyber Security Auditors to join a growing team delivering high-impact assurance services across UK Government and Defence programmes. This role is suited to auditors already operating within NCSC-aligned frameworks , with the ability to lead and deliver audits across nationally significant cyber assurance schemes. Essential Requirements (Must Have) ISO27001 Lead Auditor qualification (or equivalent) Chartered Auditor and Assessor accreditation Active presence on the NCSC Assured Service Provider / Auditor register Proven experience delivering NCSC-aligned audits The Role You will lead the delivery of cyber security audits across frameworks such as CAF, DCC, and GovAssure , supporting government-led cyber resilience initiatives. Key responsibilities include: Leading end-to-end cyber security audits across client environments Assessing compliance against frameworks such as CAF (v3.2 / v4.0) and GovAssure Producing high-quality audit reports with clear, actionable recommendations Engaging with stakeholders to support remediation and continuous improvement Maintaining audit documentation and evidencing to regulatory standards Staying current with evolving NCSC guidance, standards, and best practice What We're Looking For Minimum 3+ years' experience in cyber auditing, compliance, or risk (Public Sector / Defence preferred) Strong working knowledge of NCSC CAF frameworks Experience leading audit engagements and managing audit teams Excellent stakeholder engagement and report writing skills Ability to operate independently in client-facing environments Due to the nature of the roles, applicants must be UK sole nationals and hold UK Security Clearance to SC level, or preferably DV. If you'd like to discuss this role in more detail, please send your updated CV to (url removed) and I will get in touch.

Information Security Analyst - Audit & Compliance We're working with a global leader in CX and workforce management solutions to find a certified Security Auditor. This is a fantastic opportunity to join a company that's setting the highest standards in cybersecurity and security compliance. You'll play a key role in ensuring compliance with leading security frameworks, preparing for and conducting audits, and contributing to security operations. You'll be joining a collaborative, ambitious team where there are genuine long-term career prospects and endless opportunities to develop. The Role Lead and conduct internal audits across ISO 27001, GDPR, DORA, Cyber Essentials & more. Prepare teams for external audits and manage the audit process end-to-end. Monitor changes in compliance frameworks and maintain alignment. Support the Cyber Security Operations Centre (CSOC) in incident monitoring and response. Develop and maintain policies, procedures, and security documentation. Collaborate with IT & Security teams to identify and remediate vulnerabilities. What We're Looking For Strong knowledge of audit & compliance frameworks (ISO 27001, Cyber Essentials, GDPR, DORA). Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal/external audits and compliance assessments. Relevant security/audit certifications (CISA, CISM, CISSP, ISO 27001 Lead Auditor, Cyber Essentials Assessor, or equivalent). Eligible for UK Security Clearance. What's In It For You? Salary approx £90,000 + Bonus, Pension, Healthcare, Flexi-Working and much more. Hybrid working (2 days in the London office). Excellent long-term career growth with a global organisation. Work alongside some of the best minds in the industry. This is a unique chance to be part of a company that's innovating in cybersecurity and compliance at a global scale. Hit apply to upload your CV Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.

Lead Auditor x2 +Permanent opportunity +Hybrid working - Corsham / West Country +SC / DV clearance is essential We are looking for experienced Lead Cyber Security Auditors to join a growing team delivering high-impact assurance services across UK Government and Defence programmes. This role is suited to auditors already operating within NCSC-aligned frameworks , with the ability to lead and deliver audits across nationally significant cyber assurance schemes. Essential Requirements (Must Have) ISO27001 Lead Auditor qualification (or equivalent) Chartered Auditor and Assessor accreditation Active presence on the NCSC Assured Service Provider / Auditor register Proven experience delivering NCSC-aligned audits The Role You will lead the delivery of cyber security audits across frameworks such as CAF, DCC, and GovAssure , supporting government-led cyber resilience initiatives. Key responsibilities include: Leading end-to-end cyber security audits across client environments Assessing compliance against frameworks such as CAF (v3.2 / v4.0) and GovAssure Producing high-quality audit reports with clear, actionable recommendations Engaging with stakeholders to support remediation and continuous improvement Maintaining audit documentation and evidencing to regulatory standards Staying current with evolving NCSC guidance, standards, and best practice What We're Looking For Minimum 3+ years' experience in cyber auditing, compliance, or risk (Public Sector / Defence preferred) Strong working knowledge of NCSC CAF frameworks Experience leading audit engagements and managing audit teams Excellent stakeholder engagement and report writing skills Ability to operate independently in client-facing environments Due to the nature of the roles, applicants must be UK sole nationals and hold UK Security Clearance to SC level, or preferably DV. If you'd like to discuss this role in more detail, please send your updated CV to (url removed) and I will get in touch.