Head of Information Security

Job Description

Despite mountains of supposed anti-fraud paperwork, a friend of founders Olly and Jack still got defrauded out of £25k when trying to buy a property in 2017.

This personal experience led them to discover that a torrent of money laundering and payment fraud (over £100bn every year) was hurting professional services across Legal, Property and Finance. Back in 2017, anti-fraud tech didn’t exist and both professionals and their clients were suffering enormously.

Olly and Jack quit their jobs to build the first platform that would bring together digital KYC, open banking-powered AML and secure payments. First of its kind, this all-in-one platform enables professionals and their clients to transact safely and seamlessly. We want to help people move fearlessly.

Starting at the intersection of property and legal (Property Lawyers), we have since expanded into full service Legal, Property and Financial Services are coming next.

Over 850 businesses now trust Thirdfort to provide beautifully secure experiences. The Thirdfort mobile app is downloaded by their clients over 50,000 times every month.

We’ve raised over $25m from VCs Breega and Element Ventures with the founders of Zoopla, ComplyAdvantage, Tessian, Fidel and Funding Circle giving their personal backing.

Information Security at Thirdfort

Technology is the fundamental part of Thirdfort. Security first is one of our core culture values. We want to invest in establishing a function that will look after Thirdfort Security as a whole. This function will be accountable for policies, procedures and security incident response; application and infrastructure security; security training, awareness and compliance. This function will sit within the Technology function and liaise with other parts of the organisation such as Legal, TechOps, Engineering, Product, People and Commercial.

Your Mission - Identify fundamental security issues at Thirdfort and design and implement security infrastructure to address them.

Your core responsibilities will include:

• Processes and policies:
• Create and evolve processes, procedures, policies and training to reduce security risks across the organisation
• Establish and disseminate controls, procedures and authoritative guidance by collaborating with other parts of the business(Legal, People, Support, and others)
• Liaise with Legal on compliance with the industry frameworks such as SOC and ISO
• Help to adhere to principles of data minimisation and agreed retention periods within our environment and with suppliers, to the extent within our control or influence

Security Incident Management:

• Own Security Incident Response management process
• Incorporate security elements within Business Continuity Planning, Disaster Recovery and Crisis
• Be accountable for identifying, resolving and managing security threats, vulnerabilities, non-compliance and risks specific to the organisation

Application Security:

• Utilise as appropriate third party support to provide penetration testing, continuous scanning of code, libraries and infrastructure
• Partner with Product and Engineering on the delivery of secure and appropriately accessible architecture, data, products and services

Team and Influence:

• Influence effectively diverse stakeholder groups ranging from tech savvy and non technical audience to the exec team
• Build, lead, manage, nurture and develop the InfoSec Team

We're looking for someone who:

• Has experience in Application Security
• Is experienced in security incident response management
• Has worked in a Technology Environment
• Is comfortable managing various stakeholders
• Has built and lead a security team
• Has experience in change management
• Is able to simplify complexity

Life at Thirdfort:

• Flexible Working Hours
• Enhanced parental leave
• Work from home allowance
• Unlimited annual leave
• Unlimited sick leave
• Access to Spill, our mental health partner
• Regular company and team socials
• Bi-weekly Lunch & Learns sessions, as well as an uncapped budget for personal development
• Wellness campaigns, including #wellnesswednesdays which provides wellness prompts & tips to the team and a no internal meeting day
• Share options for all UK employees
• Customisable wellness budget and discounts on well-known brands with our partner ThanksBen

We’re committed to building an inclusive, equitable and diverse culture where everyone has a chance to make a difference. We’re purposefully building a team of problem-solvers that reflect our values - which is why we hire from all backgrounds. If you're an ambitious, talented individual who takes ownership, you'll be a great Thirdforter.

If you require any reasonable adjustments during the application or interview process, please let your dedicated Talent Manager know and we’ll do our best to accommodate.