Information Security Director US, Sycurio
Data security solutions
Be an early applicant
Data security solutions
101-200 employees
Be an early applicant
101-200 employees
Company mission
To transform and simplify how organisations manage payment security, regulatory compliance and consumer data protection.
Role
Who you are
- Bachelor's degree in Computer Science, Cybersecurity, or related field (Master's preferred)
- Industry certifications such as CISSP, CISM, CISA, or equivalent
- 10+ years of information security experience. Financial/Fintech services/payments desirable
- Deep knowledge of security frameworks (PCI, ISO 27001, NIST) and regulations (GDPR, CCPA)
- Experience with PCI DSS compliance and implementation
- Proven success in managing external auditors to achieve positive outcomes
- Expert in information security with strong communication and stakeholder management skills
- Experience in managing security incidents and leading incident response
- Experience with security assessment tools and vulnerability management
- Strong vendor management and third-party risk assessment experience
- Strong understanding of cloud security principles and best practices, particularly in AWS
- Solid understanding of payment processing systems and associated security controls
- Good communication and interpersonal skills, with the ability to effectively communicate security-related questions to technical and non-technical stakeholders (employees, customers, or partners)
- Project management skills, with the ability to manage projects such as processes implementation and improvement, security systems implementation
- Ability to collaborate cross-functionally and influence stakeholders at all levels of the organisation
- Good knowledge of Dev(Sec)Ops and how to implement secure software development practices
What the job involves
- The Information Security Director develops, shapes and maintains Sycurio’s information security capability, driving the attainment and maintenance of the ISO27001; PCI-DSS and SOC2 compliance
- They are the subject matter of all things regarding security and compliance, owning the information risk management processes
- They are the thought leader on all matters within the security and compliance domain such that the company remains secure against the ever-changing security threat and compliance landscape
- Create and maintain the Company’s strategy, ensuring alignment to the Company’s strategy and business goals
- Work across internal and external stakeholders, communicating the information security strategy to relevant parties, providing assurance of policies, procedures, and systems
- Develop, maintain, and expand the information security management system (‘ISMS’) in line with an optimise compliance for ISO27001, PCI-DSSS and SOC2 compliance
- Identify gaps in the information security capability, both technical and operational, and propose remediation and mitigation plans and solutions
- Responsible for the Company’s information security capability, ensuring it remains secure against an ever-changing threat landscape
Our take
Sycurio, formerly Semafone, is a data security and compliance solutions company for call-centres with major clients including BT, Talk Talk, and Sky among others. The company uses data security tools and analysis to make sure that customer calls are always secure and private.
Sycurio has had quite the journey since its founding in 2009, with long-term support from the Business Growth Fund before its buyout by Livingbridge. Livingbridge is an investment firm, and its buyout of Sycurio led to the latter's name change from Semafone.
This buyout marked a major step for Sycurio, which has benefitted from a massive shift to digitised customer interactions in the 2020s. Personal data coverage by modern privacy regulations has risen by 10% between 2020 and 2023, meaning that more companies than ever are seeking partners such as Sycurio to help navigate the evolving data and privacy compliance sector. So as customer interaction digitisation evolves, Sycurio is in a prime position to help businesses make the shift.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- 25 Days Holiday
- Up to 10% Bonus
- 4 x Salary Life Insurance
- Vitality Health Insurance
- HealthShield Cash Back Plan
- Employee Assistance Programme
- Bespoke Discounts and Communications Hub
- Up to 5% Contributory Pension
Company HQ
Guildford, UK
Leadership
Nick Viney
(CEO, not Founder)Currently Board Director at Social Progress Imperative, Advisory Board for Foresight Cyber, Non Executive Director at ONE TRIBE and Advisory Board at Kindred.
Share this job