Lead the PayTech Information Security function with alignment to Edenred's wider cyber risk management strategy.
Develop and enhance security policies, standards, and procedures across the organisation.
Manage the information security risk program, maintaining a comprehensive risk register.
Oversee AI/ML security risk management, including the development of policies for generative AI technologies.
Collaborate with Financial Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime.
Manage third-party security risk due diligence programs.
Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs).
Drive cyber awareness programs and phishing simulations to embed a security-aware culture.
Manage security incident response planning and coordinate with Security Operations Centre (SOC).
Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program status and risks.
Lead a team of approximately 6 security professionals.
Qualifications & Experience:
Solid experience senior information security leadership roles.
Proven hands-on experience managing PCI DSS and other compliance programs.
Experience in complex corporate structures with multi-stakeholder compliance demands.
Strong background in developing security governance frameworks and policies.
Experience with financial services, FinTech, or payments sector preferred.
Familiarity working with financial crime, fraud, and AML functions.
Experience managing risks associated with emerging technologies like AI/ML.
Desired Certifications:
CISSP (Certified Information Systems Security Professional) - highly desired
CISM, PCIP, ISA, or QSA qualifications are advantageous.
Requirements
Strong leadership and mentoring capabilities.
Deep technical knowledge in network security, cryptography, IAM, and cloud security (AWS, Azure, GCP).
Excellent communication skills, able to convey complex security topics to non-technical stakeholders.
Pragmatic, calm, and resilient under pressure during incident management.
Why Join Us?
Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies and data, contribute to innovative AI risk frameworks, and help shape the future of PayTech's secure growth.
Apply now and Vibe with Us!
Benefits
Paid time off
Additional Information
Take a step forward and let Edenred surprise you.
Every day, we deliver innovative solutions to improve the life of millions of people, connecting employees, companies, and merchants all around the world.
We know there are hundred ways for you to grow. With us, you will expand your skills in a multicultural, challenging, and dynamic environment.
Dare to join Edenred and get ready to thrive in a global company that will offer you endless opportunities.
Edenred is all about meritocracy. You come as you are, and you contribute. Indeed, the Edenred Group recognizes, recruits and develops all talents and singularities.
We are committed to preventing all forms of discrimination and to providing all our candidates with equal opportunities regardless of their gender and gender expression, disability, origin, religious belief and sexual orientation or any other criteria.
Head of Information Security - PayTech
Location: Swindon/London
Type: Full-time, Senior Leadership Role
About PayTech:
Join PayTech, a leading FinTech company within the Edenred group, committed to securing innovative payment technologies and protecting critical customer and company data. We are looking for an experienced and strategic Head of Information Security to lead and advance our security posture in a fast-evolving technological and regulatory landscape.
Role Overview:
As the Head of Information Security, you will be a senior leader responsible for defining, implementing, and maintaining PayTech's information security strategy. You will protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements.
Edenpeople · United Kingdom