Head of Information Security Risk, Seccl
£110-130k
The embedded investment platform
Be an early applicant
The embedded investment platform
101-200 employees
Be an early applicant
£110-130k
101-200 employees
Company mission
Seccl is the Octopus-owned embedded investment platform that’s helping more people to invest – and invest well.
Role
Who you are
- You hold current CISSP certification
- You bring significant experience leading Information/Cyber Security in a regulated environment
- You’ve operated within ICO-regulated environments and understand the practical realities of GDPR compliance
- You have strong working knowledge of risk methodologies, security frameworks and industry standards
- You’re comfortable with modern cloud technologies and understand the security considerations that come with them
- You’re a certified ISO 27001 Lead Auditor and/or Implementer, with hands-on experience applying the standard in practice
- You have a solid technical foundation in IT or security, allowing you to engage credibly across engineering and leadership teams
- If this sounds like your kind of thing, we encourage you to apply even if you don’t tick every box. We’d love to hear from you!
What the job involves
- Reporting into the Chief risk officer (CRO), the head of information security risk role is responsible for the day to day management and continual improvement of the information security management system (ISMS)
- You will be responsible for designing, implementing, and monitoring Seccl’s Information Security Management System (ISMS)
- You will also provide second line oversight of all security activities at Seccl
- Shaping and driving our information security strategy alongside the CRO and executive team, ensuring security enables - not slows - our growth
- Partnering with Risk to define and embed our security risk appetite, making smart, commercially aware decisions in a fast-moving environment
- Evolving and strengthening our ISMS, continuously improving policies, controls and processes as we scale
- Owning oversight of third-party security reviews and customer due diligence, helping us move quickly while maintaining high standards
- Turning security metrics and risk insights into clear, actionable reporting for senior leadership and governance forums
- Leading internal audits and control effectiveness reviews, including ISO 27001/27002 controls, with a focus on pragmatism and continuous improvement
- Driving resilience across the business — from business continuity and disaster recovery testing to hands-on incident oversight and lessons learned
- Acting as our Data Protection Officer, championing GDPR compliance, advising on DPIAs and confidently engaging with regulators and data subjects when needed
Application process
- Interviewing is a two-way thing, and we want you to have the time and opportunity to get to know us, as much as we are getting to know you. Our interviews are conversational, so come with questions and be curious. In general, you can expect the interview process to look a bit like this, (following an initial chat with one of our Talent team):
- First stage – 45 mins competencies-based interview with the hiring manager and Head of operational resilience
- Second stage – one-hour technical interview or assessment with the hiring manager and current Head of information security risk
- Final stage – 45 mins bar-raiser culture-based interview with the CTO and Operations director
- ⏳ We’ll only close this role once we have enough applications for the next stage. Please submit your application as soon as possible to make sure you don’t miss out and you should expect to hear back from us within one to two weeks of applying
Our take
Seccl is an embedded investment platform revolutionising how companies offer investment services. With its API-first technology infrastructure, it helps financial professionals and businesses launch and manage investment platforms easily. By simplifying old, clunky processes, Seccl gives firms the tools they need to offer customers a seamless, digital investing experience - whether it's for financial advisers, neobanks, or fast-growing startups.
Since being acquired by Octopus in 2019, Seccl has seen impressive growth. Now supporting over 1 million investors, it manages more than £6 billion in funds through its platform. With this, Seccl is well on track to power even more businesses, and as it continues to grow, its mission to disrupt the industry with smarter, scalable solutions is only growing in momentum.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Flexible/hybrid working: We don’t prescribe when or how many days you come into the office. It’s what you deliver that’s important
- Events and socials: Twice-yearly all-company offsites, regular team socials and plenty of non-work activities – from gigs to sporting activities – to get stuck into
- Private medical: Access GP and other health and dental appointments work through private medical insurance
- Focus on mental health: Your wellbeing is more important than work. We offer free and confidential access to therapy if you need it
- Long-service award: A month’s fully-paid sabbatical when you’ve worked here for eight years (we’re part of Octopus, after all)
- The usual stuff: 27 days’ holiday (plus religious holidays and your birthday), Cycle2Work scheme and workplace pension
Company values
- Never settle
- Take ownership
- Be generous and candid
Company HQ
Holborn, London, UK
Articles
Leadership
David Ferguson
(Executive Chairman)Joined Seccl in 2022 as CEO. Before that, they spent 15 years as the CEO of Nucleus Financial Group.
Jonathan Dees
(CEO)Previously COO of Octopus Investments and ZPG. Before that, they were Interim CFO at the Fairtrade Foundation.
Share this job
View 9 more jobs at Seccl