Head of Cybersecurity, Railsr
Banking-as-a-Service platform
Job no longer available
Banking-as-a-Service platform
101-200 employees
Job no longer available
101-200 employees
Company mission
To make finance an amazing experience everywhere in the world.
Role
Who you are
- Strong understanding of cloud-native approaches (security groups, AWS principles)
- Strong knowledge of securing containers (docker/kubernetes)
- Strong networking knowledge (TCP/IP v4 & v6, dhcp, CIDR, routing)
- Knowledge of contemporary security best-practices, standards, benchmarks
- Familiarity with the Cyber Kill Chain, MITRE ATT&CK, and other common tools used
- Familiarity with financial regulatory requirements and industry standards like ISO 27001, SOC 2 or NIST CSF
- Experience undertaking AWS Well Architected Reviews & Security Improvement Programmes is a plus
- Strong communication skills with the ability to convey complex technical issues to non-technical stakeholders
- Meaningful metrics that show impact
- Experience with any of the following is a big plus:
- Working in a financial services firm (we're FCA & European licensed)
- Threats and Vulnerabilities that are being actively exploited
- Regulatory Technical Standards issued by the EU for payments
- Identity & Access Management / Oauth
- NIS2, DORA, AI Act
- EBA Guidelines on (a) ICT Risk Management, & (b) Outsourcing
What the job involves
- As the Head of Cyber Security, you will be responsible for leading the execution of Infosec and Cloud Engineering enhancement programs for Railsr, helping deliver against the company's InfoSec strategy
- You will lead and foster the DevSecOps team, overseeing cybersecurity operations, risk management, employee awareness initiatives, continual improvement and driving innovation in security technologies and practices
- As the Head of Cybersecurity you will lead our DevSecOps team, working closely with our CISO, CTO and the broader Tech leadership group
- As a Technical lead you will play a key role in the architecture, roadmap and technology direction
- The role will be a mixture of being hands-on doing, and leading
- You will ensure policy, standards, and guidelines remain practical and followed
- You will verify that software, hardware, and firmware updates are timely applied and vulnerabilities are monitored and remediated in a proportionate way
- You will commission penetration tests, working with the testers and the Railsr counterparts, reviewing reports and ensuring that findings are tracked and resolved by relevant owners (which may include the DevSecOps team)
- You will develop and enhance the skills of the DevSecOps team and ensure the Security culture is fostered within the broader Railsr Engineering faculty
- You will build and maintain a toolset t.o help people release more secure code, which could be part of Security CI/CD pipelines
- You will train people through desktop exercises, simulations and other tools, so responses are easier to deploy when a real incident happens
- You will establish a series of KPIs/KRIs to use for continual improvement, and provide visibility to the status of our security risks, remediation plans and the different initiatives within the DevSecOps space
- You will help assess the security posture of our customers, being part of the team setting the standards required for them
- You will be the day-to-day lead for our Security Incident Response Team, defining and coordinating all stages of Security Incident Containment and Management against playbooks (escalating to CISO when necessary)
Salary benchmarks
Our take
As the digital economy has grown, so too has the market for 'Banking-as-a-Service' - the process of ensuring the overall execution of financial services over the web. As businesses expand online, they have opportunities to be able to build and sell various financial services or add fintech features to their existing products. Railsr (formerly Railsbank) facilitates companies doing this easily, where it would previously have been a huge undertaking.
Essentially, Railsr is making financial services more inclusive. Previously, the complexities of legacy technology, managing global compliance and ancient bank processes have created a slow, complex and costly experience for customers. Now, through Railsr's Open Banking Platform and APIs, financial innovators have the means of creating the financial services, products and experiences their clients want.
In 2022, shortly after becoming Railsr, the company benefitted from the embedded finance boom and raised a large funding round to support its ongoing expansion efforts. Early in 2023, however, the company had to undertake an emergency sale and shift of control - though it seems to have remained positive throughout, citing the sale as a "pivotal moment" that will enable it to "rebuild momentum, drive change and return Railsr to growth."
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 8 rounds)
Oct 2023
$24m
GROWTH EQUITY VC
Oct 2022
$26m
SERIES C
Total funding: $171.4m
Company benefits
- Work from home opportunities
Company HQ
Holborn, London, UK
Leadership
Philippe Morel
(CEO, not founder)Was the CEO of SETL for four years. Previously Principal Investment Leader (EMEA) at Boston Consulting Group.
Share this job
View 1 more job at Railsr