Director, Information Security - Continuous Exposure Management

We’re seeking a future team member for the role of Director, Information Security – Continuous Exposure Management to join our team. This role is located in London.

In this role, you’ll make an impact in the following ways: 

• Act as product owner for our exposure management framework. You’ll set the vision, roadmap and backlog, and prioritize work by risk reduction and business value

• Use product management skills at an organizational level to drive change. That means building the case for change, aligning senior stakeholders and helping teams across the firm adopt new ways of working

• Use AI to transform how we identify, prioritize and remediate exposure. You’ll find where AI can automate or speed up our processes, and take those uses from proof of concept to live service

• Plan and run delivery sprints: define clear outcomes, manage dependencies, remove blockers, and report progress to stakeholders and senior leadership

• Work across cyber engineering, application security, technology, risk and governance teams to achieve shared outcomes

• Integrate new security solutions into existing frameworks, controls and workflows so they add value without creating friction for delivery teams

• Evolve and iterate processes, frameworks and technology at pace, using data, metrics and feedback to measure impact and decide what to change next

• Make sure changes meet policy, regulatory and compliance requirements, and that controls stay effective as the framework evolves

• Analyze security data and assessments to give senior stakeholders insights, conclusions and actionable recommendations
   

To be successful in this role, we’re seeking the following: 

• Bachelor’s degree in computer science or a related discipline, or equivalent work experience required; advanced degree preferred

• Extensive experience in information security or related technology required. This includes a strong understanding of cyber security frameworks (such as NIST CSF, ISO 27001, CIS Controls or Continuous Threat Exposure Management (CTEM)) and their related tooling and technology

• Proven product management experience at an organizational level, including owning a roadmap and backlog and delivering change across multiple teams

• Hands-on experience running agile delivery (Scrum, Kanban or similar), including sprint planning, backlog management and measuring outcomes

• Experience using AI or automation to transform processes, with a practical understanding of where AI adds value and where it doesn’t

• Experience in exposure or vulnerability management, application security testing or security control frameworks is highly desirable

• Experience in the securities or financial services industry is a plus

• Strong leadership presence and interpersonal skills, with the ability to influence without direct authority

• Excellent communication and stakeholder engagement across time zones and cultures

• Results-oriented with a focus on delivery, accountability and quality, and comfortable working at pace in a changing environment