Information Security Lead

Experience

8-10+ years Career path: Progression to Head of Information Security We are supporting a growing FinTech in the search for a hands-on Information Security Lead. This is an individual-contributor position for someone who wants complete ownership of security within a fast-moving product environment. You will establish the company s security structure, implement controls personally and work closely with senior technology and business leadership. As the business grows, you will have the freedom to shape the security function, engage specialist contractors and build a team around evolving business requirements.

Responsibilities

• Take end-to-end ownership of information and product security
• Develop and implement security policies, procedures, controls and governance structures
• Create and execute a practical security roadmap aligned with business priorities
• Embed security throughout product development and the software development lifecycle
• Assess and manage risks across cloud infrastructure, applications, APIs and third-party integrations
• Oversee vulnerability management, penetration testing, incident response and security monitoring
• Support relevant regulatory, audit and compliance requirements
• Introduce security automation and AI-enabled agents where appropriate
• Personally deliver security initiatives while engaging specialist contractors when required
• Stay informed about emerging cyber threats, vulnerabilities and industry developments
• Represent the company at relevant cybersecurity, FinTech and technology events
• Define the future security-team structure and progress towards leading the function

Experience

At least 8-10 years of cybersecurity or information-security experience. A background within FinTech, payments, digital wallets, SaaS or another technology-product business. Strong hands-on experience across product, application and cloud security. Experience establishing security processes, controls and procedures from the ground up. Knowledge of secure SDLC, DevSecOps, APIs, mobile applications and cloud environments. Understanding of vulnerability management, penetration testing and incident response. The ability to balance security risk with product speed and commercial priorities. Experience selecting and managing specialist vendors or contractors. Strong autonomy, accountability and senior-stakeholder communication skills. Desirable

Experience

Experience building security automation or AI-powered security tools and agents. Active participation in bug-bounty programmes, responsible disclosure or security research. Public speaking or previous representation of a company at industry events. Exposure to payments security, PCI DSS, ISO 27001 or financial-services regulation.