Compensation Overview

What’s the opportunity for a Infosec Manager at Gearset?

• Build on your prior experience from an information security role, within a technology company, to support our ambitious company growth plans. 
• Ownership over keeping our security documentation accurate and up to date, such as policies, procedures, and support documentation across our information security programs.
• Own commercial relationships and support teams in sometimes complex information security negotiations, while making sure we respond accurately and within given timescales.
• Be responsible for maintaining our current ISO 27001 compliance and certification through continuous improvement activities, as well as supporting preparation for internal and external audits. 
• Gain experience in the implementation and ownership of additional compliance based projects as we increase the international regulation and standards we comply with.
• Help keep us efficient to work with by spotting common blockages or queries in deals and recommending ways that we might standardise and improve documentation or processes. 

What you’ll achieve

• Become a technical expert on the company and our products to streamline customer onboarding, and security reviews.
• Own reviewing and responding to our customer security requests.
• Ownership of compliance and reporting to the international information security standard ISO 27001, to ensure Gearset retains our certification and continues to provide the highest level of protection to our customers’ data.
• Work as part of the compliance project team when implementing new regulations or standards such as HIPAA, fedRAMP etc.
• Have the opportunity to get certified to international standards on Information Security, Cyber Security, etc.

About you

• Have experience in an information security role, within a technology company and hold either a ISO 27001 Lead Implementer or Lead Auditor certificate.
• ​​In-depth knowledge of ISO 27001 standards & proven experience in implementing ISO 27001 and maintaining the certification
• Great technical knowledge of AWS Cloud infrastructure, and application security
• A technical predisposition, and the desire to learn
• Excellent communication skills, with attention to detail and a passion for always delivering a great customer experience
• The ability to react to the needs of a rapidly growing company and comfortable working in an ever changing environment

Great to haves

• A degree in Computer Science, Information Security, Cybersecurity, or a closely related discipline
• A recognised Information Security qualification such as CISSP, CompTIA Security+ etc
• Past exposure to other regulations or frameworks such as NIST, HIPAA, fedRAMP 
• Knowledge of DevOps and DevSecOps
• Knowledge of data protection laws such as GDPR, CCPA

Salary and benefits (the stuff you’d expect!)

• Salary up to £45-55k per annum (depending on experience)
• This is a full time opportunity, working Monday to Friday remote in the UK
• Generous personal development budget for courses, conferences, or whatever is useful to your professional development in the role of up to £1500 per year
• Top end hardware provided
• Free lunch in the office
• 25 days holiday plus bank holidays (with the option to buy an extra 5 each year)
• Company Pension Plan (matching up to 5%)
• Bupa health care
• Life Insurance & critical illness cover
• Discounted gym membership, as well as a range of health and wellness benefits
• Opportunity to join our Long Term Incentive scheme