Перейти к основному содержимому
Masabi

Head of Security & Compliance

УдалённоUnited Kingdom толькоВ архиве
Опубликовано
Роль
Безопасность
Опыт
C-Level
Занятость
Полная занятость
Зарплата не указана
Проверьте доступность

Доступно для: GB only. Укажите, откуда вы работаете, чтобы проверить доступность.

Коротко по делу

Senior Head of Security & Compliance needed for a global SaaS business in the public transport ticketing space. Requires strong, hands-on experience with PCI DSS, ISO27001, and SOC2, including audit management. Must have experience owning and delivering compliance programs in a growing company and leading teams. Role is UK-based remote, with London hybrid option.

Ключевые навыки

PCI DSSSecurityCompliance

Обязательные навыки

ISO27001SOC2Cyber EssentialsISO 27017ISO 27018

Желательные навыки

ISO 27017ISO 27018CISSPCISMCISAISO27001 Lead Auditor

Обязательные языки

English

Чем предстоит заниматься

  • Take ownership of security and compliance across Masabi, creating clarity on priorities and ways of working
  • Build a clear view of our current security posture and define a practical path to strengthen it over time
  • Define security and compliance requirements and work closely with Engineering and IT teams to ensure they are implemented effectively
  • Maintain existing compliance across PCI DSS, ISO27001, SOC2 and Cyber Essentials, and lead new compliance initiatives across additional standards such as ISO 27017 and ISO 27018
  • Manage audits end to end, from preparation through to delivery and follow-up actions
  • Work closely with Engineering and Product teams to embed security practices in a way that supports delivery
  • Maintain a clear and actionable view of risk, helping the business prioritise what matters most
  • Build a more scalable approach to customer assurance, including clearer processes and reusable materials for customer and audit requests
  • Help guide decisions on which compliance standards we take on as we grow
  • Lead and support a small team, creating focus, trust and shared direction

Что требуется

  • You’ve worked in security and compliance within a payments, fintech or PCI-regulated environment
  • You have strong, hands-on experience with PCI DSS, ISO27001 and SOC2, including preparing for and delivering audits
  • You’ve personally owned and delivered compliance programmes, not just overseen them
  • You understand how security and compliance connect, and how to make them work in practice across a business
  • You’ve operated in a growing or scaling company, where you’ve had to bring structure and prioritise effectively
  • You’re comfortable driving work across teams without direct authority, and following through to completion
  • You bring sound judgement when balancing risk, delivery and commercial needs
  • You’ve supported or led a small team and know how to create clarity and accountability
  • You communicate clearly with both technical and non-technical audiences, helping people understand what matters and what action is needed
  • Experience working with additional ISO standards such as ISO 27017 and ISO 27018
  • Experience scaling security and compliance in a growing SaaS company, especially through periods of increased customer or regulatory demand
  • Relevant certifications such as CISSP, CISM, CISA or ISO27001 Lead Auditor or similar
  • Awareness of AI-related security and governance considerations, and how they may apply in a SaaS environment

Преимущества

  • 25 days of holiday per year plus the option to buy another 5 days pro-rated
  • Private Healthcare via AXA, including pre-existing conditions and mental health
  • Life Insurance
  • Menopause support
  • Choice of workstation
  • Ability to work for up to 3 months per year from any country in the world (certain limitations)
  • Pension scheme
  • Training allowance of up to £1000 per year
  • £200 annual allowance for any home office need or improvement
  • Enhanced family leave pay
  • Cycle to work scheme
  • Regular social gatherings with a monthly allowance for each employee
  • Fun and collaborative environment with a focus on making a difference in the world

Masabi builds fare collection platforms that allow riders to buy and present tickets for public transport on mobile phones, ticket machines, or by tapping their bank card. Its Justride platform is used in over 250 locations globally, and its mobile ticketing SDK has partnered with transport players including Uber, Moovit and Transit.

TransportationСредняяmasabi.com
Зарплата не указана