Chief Information Security Officer, Curve
Banking platform consolidating cards & accounts
Be an early applicant
Banking platform consolidating cards & accounts
201-500 employees
Be an early applicant
201-500 employees
Company mission
Curve is on a mission to simplify the way people spend, send, see and save money.
Role
Who you are
- You will have at least 3-5 years experience in a senior Cyber security role and have designed and/or executed a cyber strategy and represented security in C-suite decision making
- Firm technical and practical understanding of information security best practices such as NIST, ISO 27k, NCSC, Open Web Application Security Project (OWASP), and the ability to assess and score vulnerabilities in environments similar to Curve’s
- Have a relevant industry recognised certification such as; CISSP, CIPP/E, CISM, CRISC or CISA
- Understands and keeps up to date working knowledge of the internal & external threat landscape
- Develop, deploy and lead security compliance strategy to ensure compliance with SOC2, ISO27001, GDPR, PCI DSS, local privacy laws, contractual requirements and globally-recognized standards and guidelines
- Experience building incident response and management frameworks
- Understands the overall business architecture and how 3rd parties contribute to the Cyber Security landscape
- Extensive experience managing third party information security risk, managing the third party information security capability and vetting new suppliers
- Experience designing and auditing networks, services and mobile applications
- Security Architecture and Assurance - Design assurance reviews and driving improvement, risk identification and mitigation design, assurance processes and procedures
- Deep understanding and experience with Firewalls, IDS, IPS, SIEM, cloud and on-premise security layers
- A proactive and a natural collaborator, who can be hands-on ,with a desire to help and support the business achieves its objectives along with shared goals
- Effective influencing skills – providing context & direction, getting buy-in from multiple stakeholders, monitoring performance, motivating staff and building a positive working environment
What the job involves
- To own and develop Curve’s Cybersecurity domain ensuring that information assets and technologies are adequately protected
- The CISO will oversee and direct all aspects of cybersecurity, risk management, and compliance efforts, working closely with stakeholders to mitigate risks and align security initiatives with business objectives
- Closely aligned to the Curve Technology function the CISO will have a reporting line to the COO function to assure decision making and prioritisation
- Security Strategy and Leadership:
- Build and execute a company-wide cyber security strategy and roadmap detailing how cyber security delivers outcomes, to measurably improve the protection of the business from credible threats
- Identify security vulnerabilities and risks associated with Curve's operations, including partnering with business units to build threat assessment into the product design and engineering processes
- Serve as a trusted advisor to executive leadership on security trends and risk factors, providing meaningful guidance about threats, security and risk posture
- Risk Management and Compliance:
- Manage and coordinate internal and external network risk assessments, vulnerability assessments, penetration tests and auditing ( including PCI & SOC2)
- Responsible for developing and managing Curve’s Cyber and information security programme, including the maintenance of existing policies, procedures, standards and guidelines and the introduction of new policies and controls to reflect changes in technology and regulatory and industry standards (e.g., GDPR, CCPA, ISO 27001, NIST, etc.)
- Incident Response and Management:
- Oversight of the incident response program, ensuring swift and effective handling of security issues including resolution and subsequent root cause analysis
- Lead forensic investigations and provide insights on security events to key stakeholders
- Develop and test business continuity and disaster recovery plans
- Technology and Program Oversight:
- Champion new technologies and enforce the best development patterns and working practices, including providing guidance to the product and engineering teams for secure product development
- Manage the evaluation, selection and implementation of information security technology and tools
- Oversee the security awareness training program for employees
- Team Building and Leadership:
- Foster a culture of security awareness across the organization
- Ability to lead, motivate and develop a cross functional, interdisciplinary team to achieve both tactical and strategic goals
- Maintaining a positive and solution-oriented approach to work, providing open and honest feedback
Salary benchmarks
Our take
Keeping track of spending across multiple credit and debit cards can be a difficult task. Curve lets customers consolidate all of their bank cards into a single card and app, to make it easier to manage spending and access other benefits.
Curve is following in the footsteps of several European neobanks, including N26, Monzo and Revolut, with ambitious expansion plans for the US. Americans have seven to eight cards on average and they typically love rewards, making the market attractive for Curve.
The company has a track record of responding quickly to consumer wants. For example, it has launched cryptocurrency rewards programs to cater to the ever-growing ‘crypto-curious market', as well as partnering with both Berg Watches and Fidesmo to meet expanding demand for wearable payments. In 2022, Credit Suisse backed a $1 billion credit facility for the company, to enable it to scale its lending business.
Steph
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
33% female employees
-24% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Sep 2023
$72.7m
SERIES C
May 2021
$11.4m
LATE VC
Total funding: $248m
Company benefits
- 20 Days Vacation (we actually want you to take this)
- 10 Paid Holidays
- Work from home opportunities
- Competitive salary with employee share options package
- Free Curve Metal subscription for you and +1
- Generous yearly Learning and Development budget
- 10 days per year for training and conferences
- Unlimited book policy
- Life insurance
- Health care cash plan
- Life coaching
- EAP services
- 24/7 GP access
- Annual subscriptions to Calm & FIIT for your mind and body
- Discounted gym membership
- Ride to work scheme
- Nutritionist access
- Discounted shopping vouchers
- Season ticket loan
- Bonus days off for your birthday, moving house and Christmas
- Six nights of Night Nanny for new parents
Company values
- Customer obsession - Start with the customer and work backwards to create meaningful experiences
- Communicate and collaborate - This helps us unify and align so we can move quickly and be empowered
- Challenge everything - Yourself, your colleagues and the status quo. Commit and progress forward together
- Build. Measure. Learn - Strive to learn and find the 'why' to measure our impact and constantly improve
- Automate to accelerate - Eliminate redundant steps to get things done and always focus on the mission
Company HQ
Paddington, London, UK
Articles
Leadership
Shachar Bialick
(CEO & Founder)Was Head of Product at Checkout.com. Founded a number of businesses in Israel, and has an MBA from INSEAD.
Share this job
View 7 more jobs at Curve