Head of Infrastructure & Cloud Security

Description

The company is hiring a Head of Infrastructure and Cloud Security to lead and grow security operations across cloud, network, identity, endpoint and data.

The role works in a hybrid setup. You will set and enforce security protocols, manage a team of security engineers, push a cloud-first approach and report on company-wide security metrics.

Responsibilities

• Shape and run the infrastructure and cloud security strategy, reporting directly to the CISO.
• Recruit, lead, coach and grow security engineers and team leads.
• Set company-wide security guardrails and approve platform exceptions rated low or medium risk.
• Run CSPM, CNAPP and CWPP tooling, WAF, DNS security and IaC scanning across cloud environments.
• Work with Platform and SRE teams on cloud IAM and security-group guardrails.
• Improve endpoint security on managed devices, covering hardening and telemetry health.
• Own data security and cryptography controls: KMS, secrets management, PKI and the certificate lifecycle.
• Track, analyse and report on company-wide security metrics.

Requirements

• Proven track record leading security engineers and managing teams.
• Hands-on background in cybersecurity engineering.
• Solid experience securing on-premises infrastructure in an enterprise setting.
• Experience with at least one major cloud provider.
• Working knowledge of cloud and network security, including CSPM, CNAPP, CWPP tools, WAF, DNS security and IaC scanning.
• Experience with EDR, XDR and MDM solutions.
• Understanding of identity and access management, including cloud IAM and security-group guardrails.
• Experience with KMS, secrets management, PKI and certificate management.
• Able to enforce security controls without slowing delivery for Platform, SRE and DevOps teams.
• Nice to have: experience building or maturing an infrastructure or cloud security function from an early stage.
• Nice to have: background in fintech, brokerage, trading platforms, payments or other regulated environments.
• Nice to have: knowledge of Kubernetes and container security, and of cloud-native architectures.
• Nice to have: exposure to SOC 2, ISO 27001 or DORA compliance frameworks.
• Nice to have: familiarity with tools such as Wiz, Panorama, Elastic Defender, Entra or CyberArk.

Conditions

Hybrid role, with remote work available.

Benefits

• 15 paid vacation days per year.
• 10 paid sick leave days per year.
• Public holidays as set out in the company's approved public holiday list.
• Medical budget.
• Education budget for professional courses.
• Language learning budget.
• Wellness budget covering gym membership, sports gear and related costs.