Head of information Security, Kaluza

• Proven experience in a senior leadership role responsible for an organisation's end-to-end information security function
• Demonstrable experience working with counterparts in product to develop and execute a multi-year cybersecurity strategy roadmap
• Strong people leadership skills with a track record of hiring, mentoring, and scaling high-performing, geographically distributed security teams
• Experience working in modern cloud security architectures (AWS preferred), including container, microservices, and serverless modern Identity and Access Management (IAM) solutions
• Proven track record of implementing security Governance, Risk, and Compliance (GRC) standards, with direct experience leading audits for standards like ISO 27001, SOC 2, or regional data-privacy laws
• Exceptional communication and stakeholder management skills, with experience presenting complex security topics, risks, and strategies to executive leaders (C-Suite) and the Board
• Previous experience acting as the senior security expert in commercial and client-facing discussions, articulating security posture and capabilities to customers and partners

Desirable

• You'll be joining the Kaluza Technology community. We’re a large team of both data-led and product focused Software, Platform Engineers and Security specialists pushing the boundaries of technology and working at an extraordinary scale
• As a collective we strive for engineering greatness and by ensuring best practices across the board of the community
• You’ll be working across Kaluza Retail, Energy Optimisation and Customer Care Platforms, collectively these aim to revolutionise the operating platforms for energy retailers globally
• This platform has been built with scale and technical quality in mind and is the foundation for decarbonisation efforts by Kaluza’s customers
• You will lead, mentor, and grow our high-performing, global team of Security and Identity specialists, setting the technical direction and creating a culture of continuous improvement
• Your primary mission is to embed robust security across the entire product lifecycle, collaborating closely with engineering and product leaders to achieve strategic goals
• You will be the senior voice for security, championing awareness programs, developing our client-facing IAM capabilities, and ensuring our compliance with rigorous international standards
• This is a highly visible role where you will represent Kaluza's security capabilities to our clients, the industry, and the board
• Provide Technical and Strategic leadership, direction and vision for cyber security, Identity and Access Management at Kaluza
• Develop Kaluza’s Identity and Access Management capabilities, working with colleagues in product to align and deliver against client needs
• Embed security by design and DevSecOps practices across our engineering teams, ensuring alignment with regulatory requirements in the markets we operate in
• Ensure our security posture meets rigorous global industry standards such as ISO27001 as well as local requirements for the markets we operate in
• Lead, mentor and develop your team of Security and Identity specialists across the UK, Europe and Australia, fostering a culture of continuous improvement and innovation
• Collaborate with product and engineering to further embed security across the product lifecycle, aligning strong security practices with strategic goals while engaging with diverse teams to understand and support their needs
• Develop and maintain Kaluza’s cloud, application, SecOps and workplace security capabilities
• Champion security with our executive team and the board. Reporting on security posture, risk, compliance status, and improvement initiatives
• Lead information security awareness and secure coding education programs for technology teams and the wider business
• Represent Kaluza’s Security & Identity capabilities with our clients and across the industry
• Reporting To: (Job title) Director of Product, Enterprise Platform