Security Manager

Job description

About Wayflyer Today's small businesses need a capital provider that keeps pace with their growth ambitions. Traditional financing options are slow, cumbersome and often out of reach. That's why we built Wayflyer. Our technology allows us to assess businesses in minutes, generate financing offers that reflect their growth potential and send funds in as little as 24 hours. To date, we've deployed over $6bn to thousands of businesses worldwide, backed by Tier 1 banks like J.P. Morgan. You'll be collaborating with ambitious colleagues from around the world. We have offices in Dublin, London, New York, Charlotte, Berlin and Sydney. The challenge We move fast, assessing businesses in minutes and sending funds in as little as 24 hours. Protecting our customers, their data and the capital we deploy has to move just as fast. One of our guiding principles is that security at the expense of user experience is a last resort: we'd rather move mountains in the background so the business can build world class products without compromising on security. As Security Manager, you'll own security across Wayflyer, from strategy, governance and risk through to the hands on monitoring, detection and response that keeps a global fintech safe, and you'll build the programme, team and tooling to scale it as we grow into new markets. What you'll actually do - Lead and grow a team of security specialists and analysts to run day to day security across the organisation, spanning security monitoring, incident response and threat intelligence - Own and define the short and long term security strategy for Wayflyer, including the technology, people and processes required to support it - Own our security policy framework, standards and controls, keeping them proportionate to how we actually work - Partner with engineering teams on application, infrastructure and cloud security, designing pragmatic solutions that don't compromise user experience - Manage third party and vendor security risk, including security assessments and due diligence for the partners and providers we work with - Work with risk and compliance teams to ensure sufficient controls are in place to mitigate known security risks and meet our regulatory obligations as a financial services company - Drive security awareness and good security habits across the whole company, from engineering to sales - Define and implement methods to continually measure and improve the maturity of the security function - Report security status, risks and progress to the relevant governance forums and senior leadership Who thrives here You take a first principles approach to security, questioning assumptions, solving ambiguous problems and optimising for outcomes over processes. You're comfortable working autonomously: you can create a future vision for security at Wayflyer and then deliver on it. You excel at stakeholder management and can communicate security concepts clearly to technical and non technical audiences alike, from engineers to executives and governance committees. You're proactive in identifying and addressing risks before they become incidents. We look for candidates with most or all of the below traits that can point to real experience applying them. - A strong background managing security teams in a tech environment or highly agile corporate environment - Breadth across security domains - security operations, cloud and infrastructure security, application security, and governance, risk and compliance - Experience defining and managing incident response capabilities, security monitoring and threat intelligence - In depth technical knowledge of securing cloud based environments (e.g. AWS) and modern endpoints - Experience building security policies, standards and controls that people actually follow - Experience working with risk and compliance functions in a regulated environment - Excellent communication skills, both verbally and in writing, with stakeholders at all levels Given what we do, experience in financial services, fintech and business to business organisations is particularly interesting to us. Please still apply if you only have experience in some of the points raised above. We hire for range What you're like as a person and how you treat people is a big deal for us. People love working with you. You're helpful and generous with your time and knowledge. People love helping you back. People know where they stand with you. You're always looking to learn and grow, on a personal and professional level. And you're always looking to help others learn and grow by sharing your own knowledge and experience. You know why diversity, equality, inclusion and belonging matter, and speak up when we can do better. What this role could turn into Security leaders here tend to grow in the direction they're most interested in, whether that's deepening a technical specialism, building out dedicated functions (security operations, application security) underneath this role, or growing towards Head of Security / CISO scope as we scale into new markets. Location and working policy 📍Fully remote, Europe. The good stuff 25 days off, plus public holidays. Equity - because you should own a piece of what you're building. Generous parental leave for primary and secondary caregivers. 60 days a year to work abroad from wherever you want. By submitting your application, you acknowledge that Wayflyer Limited will process your personal data for the purpose of evaluating your suitability for the role. Such processing is based on the need to take steps prior to entering into a potential employment agreement. To learn more about how we handle your personal data, you can contact our privacy team at privacy@wayflyer.com or review our privacy notice at https://wayflyer.com/privacy-notice. https://wayflyer.com/privacy-notice.*