Head of Information Security, Risk Ledger
£100-120k
+ EMI equity package
More information about location
2-3 days a week in office (Old Street, London)
Supply chain cybersecurity provider
Be an early applicant
Supply chain cybersecurity provider
21-100 employees
Be an early applicant
£100-120k
+ EMI equity package
More information about location
2-3 days a week in office (Old Street, London)
21-100 employees
Company mission
Risk Ledger's mission is to secure the global supply chain.
Role
Who you are
- Has 5 or more years experience as a qualified Head (or Deputy Head) of Information Security role, seasoned with scale-up organisation challenges. {CISSP, CISM}
- Has solid experience of assuring compliance with cyber security and data protection regulations within the UK and globally (e.g. GDPR, NIS Directive, EBA Guidelines)
- Has a comprehensive understanding of what it takes to comply with cyber security industry standards and frameworks in practise (e.g. ISO 27001, NIST CSF, SP 800-53, NCSC CAF, Cyber Essentials)
- Has a thorough understanding of cyber security threat and risk with the ability to think like an attacker and design controls that make a real difference
- Has proven ability to enable a business to move fast, working with colleagues to define solutions that allow us to achieve objectives, whilst also keeping us safe
- Has good research and analytical skills utilising a variety of sources: online research, industry forums, threat intel feeds etc. using these to maintain oversight of current and future threats and opportunities to mitigate them
- Has an enthusiastic ‘roll up your sleeves’ mentality, confidently getting into the weeds with the technologies that we’re using to problem-solve with colleagues
- Is feedback-driven with a positive attitude and ability to listen, learn, and iterate
What the job involves
- The Head of Information Security has a bucket load of responsibility to protect the business, inform key risk-based decisions, and operate confidently and expertly with the clear understanding that their actions underpin every operational function and, ultimately, the organisation’s commercial success
- Security is at the heart of what we do, so every member of our team is passionate about making life as difficult as possible for attackers across the globe, and that extends to our own internal systems and work environment. You will be leading the way, evolving and maintaining our own world-class defences as we scale
- And if something doesn’t go to plan, this role will be accountable alongside the executive team to contain, control and disrupt any threat—and restore normal operations
- Championing our security culture—training our team to be the best form of defence
- Conducting threat analyses and ongoing risk assessments to anticipate and design effective controls that really make a difference
- Work collaboratively with the Product and Engineering teams to maintain the technical controls that keep our service and production data safe
- Maintain the security configurations applied to our devices and SaaS services: protect colleagues with minimal friction to enable them to get their job done; monitor access provisions to ensure we are maintaining the principle of least privilege
- Ensure our security controls are clearly communicated both internally and externally through: internal documentation, and through our own Risk Ledger profile; external communication with stakeholders, clients and suppliers about how we manage and maintain our security controls
- Supporting our product development by: collaborating with the Product and Engineering teams to support their development of service features and the Framework used by thousands of organisations, including developing a relationship between the controls framework and contemporary contextual cybersecurity risks
- Developing and operating our ISMS, and all that this entails: You will also be responsible for maintaining our ISO 27001 and Cyber Essentials certifications—and other security-related compliance accreditations as may be required
- We are a scaling business, staying lean wherever possible, which means currently, responsibility for the provision & management of the technology needed for the business to function effectively sits with the Head of Information Security, with support from a handful of individuals across the business
- On day one, you will have Risk Ledger’s current Security Engineer reporting into you, but you will have autonomy to define the needs & evolution of the function however you see fit, in line with business need
Salary benchmarks
Our take
Risk Ledger was founded with the goal to shift the way organisations deal with cybersecurity and information management in the supply chain. Through its platform, Risk Ledger is marking a turning point in the process of discovering, measuring and then mitigating security risks for companies, their clients and their suppliers. Risk Ledger is trying to lower the number of data breaches experienced by companies and consumers as a consequence of supply chain attacks on a global level.
According to research, over 60% of organisations have suffered a data breach originating in the supply chain with fines inevitably following. Mainstream risk assurance methods are no longer be able to effectively detect and mitigate the growing risk associated with more complex and more global supply chains. SMEs are also generally less resilient to security attacks than multinational corporations due to smaller budgets and teams; over 50,000 SMEs in the UK could collapse after a successful cyber attack.
Risk Ledger has helped customers collect supplier data up to 70% faster than before and reduced per-supplier costs by up to 90%. Its challenge now is to provide integrations with different tools and, by doing so, turn Risk Ledger into a Security Information and Event Management (SIEM) solution.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Employee endorsements
Innovative product
"In terms of engineering, both the backend and frontend are state of the art. At the time of writing we are using VueJS (and practically all the cool..."
Funding (last 2 of 5 rounds)
Nov 2023
$8.3m
SERIES A
Oct 2021
$2.8m
SEED
Total funding: $13.5m
Company benefits
- Generous EMI equity package
- Enhanced family (parental) leave - gender-neutral policy, 12 weeks paid leave
- Comprehensive Private Healthcare covering both physical and mental well-being
- 25 days holiday (plus bank holidays!)
- Additional 30 days of unpaid leave per year to use as you wish
- £500 WFH budget
- Flexible hybrid working
Company values
- Communicate
- Always be learning
- Be honest
- Simple is best
- Aim high
- Find solutions, be pragmatic
Company HQ
Shoreditch, London
Articles
Leadership
Haydn Brooks
(CEO)Previously a Consultant in Cyber Security/Risk at KPMG & Deloitte. Also worked as Information Security Manager at Secgate.
Daniel Saul
(CTO)Started Risk Ledger after graduating from UCL, where he studied Electronic Engineering with Computer Science.
Diversity, Equity & Inclusion at Risk Ledger
India Renziehausen (Customer Success Lead)
- We're proud to come from all walks of life
- Continuing to build on strong foundations, each and every person at Risk Ledger consciously and intentionally holds themselves accountable to help create a truly special environment to work in. One where everyone can feel safe and connected to their colleagues.
- A community where you can embrace your authentic self everyday, even the bad or hard ones. Where your uniqueness and diversity of thought - through both career and life experiences - are seen, celebrated and valued.
Share this job
View 4 more jobs at Risk Ledger