Head of Cybersecurity, Railsr
Banking-as-a-Service platform
Open for applications
Banking-as-a-Service platform
101-200 employees
Open for applications
101-200 employees
Company mission
To make finance an amazing experience everywhere in the world.
Role
Who you are
- Strong understanding of cloud-native approaches (security groups, AWS principles)
- Strong knowledge of securing containers (docker/kubernetes)
- Strong networking knowledge (TCP/IP v4 & v6, dhcp, CIDR, routing)
- Knowledge of contemporary security best-practices, standards, benchmarks
- Familiarity with the Cyber Kill Chain, MITRE ATT&CK, and other common tools used
- Familiarity with financial regulatory requirements and industry standards like ISO 27001, SOC 2 or NIST CSF
- Experience undertaking AWS Well Architected Reviews & Security Improvement Programmes is a plus
- Strong communication skills with the ability to convey complex technical issues to non-technical stakeholders
- Meaningful metrics that show impact
- Experience with any of the following is a big plus:
- Working in a financial services firm (we're FCA & European licensed)
- Threats and Vulnerabilities that are being actively exploited
- Regulatory Technical Standards issued by the EU for payments
- Identity & Access Management / Oauth
- NIS2, DORA, AI Act
- EBA Guidelines on (a) ICT Risk Management, & (b) Outsourcing
What the job involves
- As the Head of Cyber Security, you will be responsible for leading the execution of Infosec and Cloud Engineering enhancement programs for Railsr, helping deliver against the company's InfoSec strategy
- You will lead and foster the DevSecOps team, overseeing cybersecurity operations, risk management, employee awareness initiatives, continual improvement and driving innovation in security technologies and practices
- As the Head of Cybersecurity you will lead our DevSecOps team, working closely with our CISO, CTO and the broader Tech leadership group
- As a Technical lead you will play a key role in the architecture, roadmap and technology direction
- The role will be a mixture of being hands-on doing, and leading
- You will ensure policy, standards, and guidelines remain practical and followed
- You will verify that software, hardware, and firmware updates are timely applied and vulnerabilities are monitored and remediated in a proportionate way
- You will commission penetration tests, working with the testers and the Railsr counterparts, reviewing reports and ensuring that findings are tracked and resolved by relevant owners (which may include the DevSecOps team)
- You will develop and enhance the skills of the DevSecOps team and ensure the Security culture is fostered within the broader Railsr Engineering faculty
- You will build and maintain a toolset t.o help people release more secure code, which could be part of Security CI/CD pipelines
- You will train people through desktop exercises, simulations and other tools, so responses are easier to deploy when a real incident happens
- You will establish a series of KPIs/KRIs to use for continual improvement, and provide visibility to the status of our security risks, remediation plans and the different initiatives within the DevSecOps space
- You will help assess the security posture of our customers, being part of the team setting the standards required for them
- You will be the day-to-day lead for our Security Incident Response Team, defining and coordinating all stages of Security Incident Containment and Management against playbooks (escalating to CISO when necessary)
Salary benchmarks
Our take
As the digital economy has grown, so too has the market for 'Banking-as-a-Service' - the process of ensuring the overall execution of financial services over the web. As businesses expand online, they have opportunities to be able to build and sell various financial services or add fintech features to their existing products. Railsr (formerly Railsbank) facilitates companies doing this easily, where it would previously have been a huge undertaking.
Essentially, Railsr is making financial services more inclusive. Previously, the complexities of legacy technology, managing global compliance and ancient bank processes have created a slow, complex and costly experience for customers. Now, through Railsr's Open Banking Platform and APIs, financial innovators have the means of creating the financial services, products and experiences their clients want.
In 2022, shortly after becoming Railsr, the company benefitted from the embedded finance boom and raised a large funding round to support its ongoing expansion efforts. Early in 2023, however, the company had to undertake an emergency sale and shift of control - though it seems to have remained positive throughout, citing the sale as a "pivotal moment" that will enable it to "rebuild momentum, drive change and return Railsr to growth."
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
50% female employees
-53% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Oct 2023
$24m
GROWTH EQUITY VC
Oct 2022
$26m
SERIES C
Total funding: $171.2m
Company benefits
- Work from home opportunities
Company values
- Excellence
- Accountability
- Diversity
- Work/Life Balance
- Trust
- Fun
- Inclusivity
- Friendship
- Noble Cause
- Respect
Company HQ
Holborn, London, UK
Articles
Leadership
Philippe Morel
(CEO, not founder)Was the CEO of SETL for four years. Previously Principal Investment Leader (EMEA) at Boston Consulting Group.
Diversity, Equity & Inclusion at Railsr
- Here at Railsr we make it a priority to ensure that our company is diverse and inclusive. Not simply because it’s the right thing to do, but because statistics prove that it creates a working environment which is safer, happier and more productive for everyone.
- We’re passionate about promoting gender, physical, ethnic and cultural diversity in our workplace. And we’re committed to helping every team member establish a sense of belonging and connection to our organisation, so that they can be truly their best self at work every day
- We regularly take time to honestly review our entire end-to-end employee experience. From sourcing, hiring and onboarding our staff, through to team-building, performance reviews, succession planning and mentoring, we consider every aspect to make sure we’re continuing to promote inclusivity, whilst measuring the impact of our approach.
- At Railsr you’ll find a diverse group of motivated individuals, with a shared entrepreneurial spirit and a start-up mentality. With 450 new team members from 39 nationalities having joined us in the past two years, we’re proud of our team and of the uniquely welcoming and supportive working environment we’ve created together.
Share this job
View 4 more jobs at Railsr