Information Security Manager, eduMe

• 1-2 years experience in a startup and/or SaaS environment
• Knowledge and experience of designing controls and processes against the SOC 2 Type 2 requirements and the NIST Cyber Security Framework or similar
• Hands on experience with information security, especially working with security technologies in cloud based environments
• Ability to conduct threat and risk assessments across varied technology stacks, identifying suitable mitigating controls
• Good understanding of privacy requirements (including UK and EU GDPR and CCPA)
• Experience working with developer and product teams to improve security processes and integrate security tooling
• Experience in managing and completing incoming vendor security reviews and working with legal and procurement teams on contractual agreements
• Ability to manage or support incidents requiring coordination across teams
• Strong cross functional collaboration skills and problem solving skills
• Excellent spoken and written communication skills in English
• Ability to participate in-person in team and company activities in London 2-3 days per week

Desirable

• We're hiring for an Information Security Manager who will join our mission and ensure learners and managers can trust the eduMe platform that delivers them a great learning experience seamlessly integrated to their day to day tools and environment
• Oversee our security programme and maintain our annual SOC 2 compliance recertification
• Lead our information security efforts: define approaches, help teams and individuals adopt good practices and run security related processes
• Work with key stakeholders to ensure that security is built into the design of projects and initiatives across the business
• You will report to the CTO and work closely with product teams and other internal stakeholders
• Our Engineering team is organised into three squads to better support our product development and to allow for strong collaboration with our designers and PMs on discovery work
• Lead and evolve eduMe’s information security and privacy programme
• Manage our annual security and compliance activities such as our annual SOC 2 Type 2 recertification and annual penetration testing
• Act as the central point of contact with the business based in the UK and US with regards to security and compliance
• Articulate security and compliance requirements in our evaluation of third party products
• Manage vendor security processes such as completing security questionnaires and including security language in contractual agreements
• Facilitate eduMe’s response to security incidents with the support from the management team and the necessary squads
• Work with teams collaboratively across the business to implement processes and tooling that facilitate a strong security conscious culture
• Work with customer facing teams to communicate eduMe’s security and compliance posture effectively
• Take a pragmatic approach to balance security best practices and the needs of the business
• Collaborate closely with our Product, Engineering, Sales, People, Finance and Customer Success teams to drive solution that align with business goals, user needs and security best practices