Staysure Group

Head of Security Operations

Staysure Group  •  Northampton, GB (Hybrid)  •  1 day ago
Apply
AI can make mistakes so check important info. Chat history is never stored.

Job Description

💷 Salary: £97,000 - £105,000

💼 Contract Type: 12 month maternity cover

🏢 Work Life Balance: Hybrid, 2 days per week at our Northampton office

✈️ Candidate Journey: Our goal is to reply to applications within 3 working days. Additionally, we make sure to acknowledge, evaluate, and respond to all applications as a way of showing our appreciation for your time and effort in applying to us.

At Staysure Group, we're committed to delivering exceptional experiences for our customers while maintaining the highest standards of information security and data protection.

We're looking for an experienced and motivated Head of Security Operations to join our Information Security team on a maternity cover basis. This is an excellent opportunity to lead a well-established security operations function, working closely with senior stakeholders to ensure our security controls, processes and technologies continue to protect the organisation against an evolving threat landscape.

🌟The Opportunity

As Head of Security Operations, you'll be responsible for leading our operational security capability, ensuring effective threat management, regulatory compliance and continuous improvement across the security function.

You'll manage a team of 3 Information Security Analysts and 3 Security Engineers in Sri Lanka, oversee security operations activities, and play a key role in driving security awareness and best practice throughout the business.

🌟Key Responsibilities
  • Act as the organisation's 1.5 Line of Defence for Information Security

  • Build out and manage the 1st Line of Defence; 3 Information Security Analysts in Sri Lanka

  • Manage the Security Testing Team; 3 Security Engineers in Sri Lanka

  • Oversee security incident management from both operational and compliance perspectives

  • Drive vulnerability management activities and remediation programmes

  • Manage and optimise security tooling and monitoring capabilities

  • Analyse threats and vulnerabilities, ensuring appropriate escalation and response processes are in place

  • Lead threat intelligence activities and coordinate remediation actions

  • Manage security controls supporting PCI DSS compliance

  • Develop and maintain reporting and Measures of Effectiveness for ISO 27001

  • Identify, assess and report on information security risks

  • Support audits, assessments, testing and compliance reviews

  • Review existing security technologies and recommend enhancements where appropriate

  • Develop and maintain information security policies, procedures and standards

  • Build strong relationships across the business, promoting a positive security culture and embedding security best practice

🌟About You

You'll be a security professional with a strong operational background, excellent leadership skills and the ability to influence stakeholders at all levels.

🌟Essential Skills & Experience
  • CISSP, CISM or CRISC certification

  • ISO 27001 Lead Implementor/Auditor qualification, or a minimum of three years' experience supporting an ISO 27001-certified organisation

  • Strong knowledge of security frameworks including ISO 27001, ISO 22301, PCI DSS and ITIL

  • Experience developing, implementing and maintaining information security policies and procedures

  • Deep understanding of security technologies, controls and operational security practices

  • Experience assessing control maturity and driving continuous improvement

  • Proven experience managing security incidents, operational security services and information security risks

  • Understanding of the opportunities and risks associated with AI technologies

  • Knowledge of GDPR and the Data Protection Act 2018

  • Understanding of Disaster Recovery and Business Continuity planning

  • Knowledge of cloud technologies and cloud security principles

  • Excellent stakeholder management, communication and influencing skills

  • Strong presentation skills with the ability to engage technical and non-technical audiences alike

We’re assembling a diverse team, where skills, not checkboxes, reign supreme, regardless of race, religion, sex, sexual orientation, gender identity or disability.

Staysure Group welcomes all new starters with open arms, providing training, development opportunities, and great benefits.

Staysure Group

About Staysure Group

At the home of travel insurance, we strive to be

the best at what we do.

Over 700 people work across our brands and our head office is in Northampton and have another office in the heart of London. We inspire, motivate and empower our employees to be the very best through a clear vision and live by the Staysure Group values.

We constantly strive to nurture our people and improve our products and services to make what we have to offer the best-in-class. We are proud that our efforts continue to be recognised year after year with a number of industry awards, such as the British Travel Awards and The Personal Finance Awards.

Industry
Finance & Insurance
Company Size
201-500 employees
Headquarters
Northampton, GB
Year Founded
2004
Social Media