Cyber Security Lead

Overview

In this Cyber Security Lead role, you own product, cloud and security assurance for a multi-tenant SaaS platform in a confidential environment. You will partner with engineering and cloud teams to secure AWS, implement threat modelling and secure software practices, and drive compliance programs (SOC 2, ISO 27001). You shape security standards and support enterprise customer due diligence. This is a chance to lead security across the full development lifecycle and elevate risk management in a fast-growing fintech-focused tech business.

Responsibilities

• Lead security across the development lifecycle including threat modelling, secure code review, vulnerability management and CI/CD security controls
• Secure AWS environments with emphasis on IAM, network segmentation, encryption, logging and monitoring
• Own security controls around identity, permissions, tenant isolation, audit trails and incident response
• Lead security assurance activities for SOC 2, ISO 27001 and related customer requirements
• Support enterprise security reviews, questionnaires and due diligence while shaping security standards across the organisation

Key requirements

• 7+ years of cyber security or security engineering experience
• Strong experience securing cloud-native SaaS platforms, preferably AWS
• Hands-on application security with threat modelling, OWASP and secure SDLC practices
• Understanding of cloud security, identity/access controls, encryption and monitoring
• Experience delivering SOC 2 and/or ISO 27001 programmes
• Experience supporting enterprise security reviews, audits or due diligence
• Strong communication skills with engineers, leadership and external stakeholders

• strong communication
• collaboration with cross-functional teams
• stakeholder management
• AWS security
• IAM and access controls
• Threat modelling

…