Head of Information Security

Salary: £57,000 - 97,000 per year

Requirements:

• Proven experience leading or significantly contributing to an information security function.
• Strong working knowledge of risk-based security management and the NIST Cyber Security Framework.
• Experience developing and delivering information security strategy, roadmaps, policies and controls.
• Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies.
• Experience using technology, automation or AI to improve security outcomes or operational efficiency.
• Experience managing security risk in cloud-based environments, ideally including Azure.
• Strong understanding of third-party security risk management.
• Experience with incident response planning, testing and improvement.
• Experience reporting security risks, controls and metrics to senior management.
• Strong communication skills, with the ability to translate technical security issues into clear business risks, recommendations and trade-offs for senior stakeholders.
• Good understanding of financial services security, risk and regulatory expectations.
• Demonstrated leadership skills with the ability to influence, collaborate and drive change across teams.
• Excellent written and spoken English.
• Relevant professional certifications such as CISSP, CISM or CRISC are desirable, but practical judgement and delivery experience matter more.

Responsibilities:

• Own and deliver our information security strategy, roadmap and operating model.
• Lead the ongoing development of our Information Security Programme, using NIST CSF as the practical risk-management framework while aligning with ISO 27001 for governance, control maturity and assurance.
• Reduce real security risk across our technology estate, people processes, suppliers and products.
• Build a small, effective and high-leverage security function that uses technology, automation and AI to scale its impact.
• Provide clear, practical security leadership to senior stakeholders, including regular reporting on security posture, risks, incidents and priorities.
• Make proportionate, risk-based decisions that support business growth while protecting customers and the organisation.
• Develop, maintain and embed practical information security policies, standards and procedures.
• Lead security awareness and training programmes that improve behaviours and strengthen our security culture.
• Own our security incident response framework, ensuring we are prepared to identify, contain, respond to and recover from security incidents effectively.
• Oversee vulnerability management, including scanning, remediation, patching and risk-based prioritisation.
• Lead third-party security risk management for key vendors, partners and technology providers.
• Define and track security metrics that focus on risk reduction and meaningful outcomes.
• Partner with Engineering and Product teams to ensure security is built into systems, services and ways of working.
• Monitor emerging threats, regulatory expectations and industry practice, then apply them pragmatically to our environment.
• Continuously improve the security function without adding unnecessary complexity or bureaucracy.

Technologies:

• AI
• Azure
• Cloud
• Support
• Security

More:

Moneybox is an award-winning wealth management platform with a mission to give everyone the means to get more out of life. We help over one and a half million people build wealth throughout their lives, whether they are saving and investing, buying their first home, or planning for retirement. This is a hands-on Head of Information Security role reporting to our Engineering Director, responsible for leading and maturing our information security function. We offer a fast-growing, ambitious, collaborative and inclusive environment with a friendly team, competitive remuneration, hybrid working, a London office by the Oxo Tower, and benefits including pension and bonus schemes, home office furniture allowance, annual learning and development budget, private medical insurance, health cash plan, cycle to work scheme, Wellhub, enhanced parental leave, and 25 days holiday plus bank holidays.

last updated 34 week of 2026