InfoSec Manager

A little bit about us…

Pion produces award-winning technology for the biggest retailers on the planet, connecting them with the youth market. Featured in The Sunday Times Tech Track 100 2020, a list of the fastest-growing private tech companies in Britain, we’re always innovating to offer new solutions that satisfy our consumers, drive ROI for our clients and create an empowering workplace for our employees.

Equity, Diversity & Inclusion at Pion

Because this part deserves a place at the top of the job ad… Here at Pion, we’re working hard to grow an inclusive, diverse and respectful group of people we’re proud of. Accountability plays a big role in our company values, and we’re totally honest, open and transparent about our ED&I efforts. This is why we’ve made our commitments and internal statistics visible for everyone to see here. Our ever-evolving culture is defined by our people, and it’s all part of #LifeAtPion.

Research shows that while men apply to jobs when they meet 60% of the requirements, women and those in underrepresented groups tend to only apply when they tick every box. We don’t think you should have to tick every box. We value your uniqueness, and it goes without saying that all applications are welcome, even if you don’t think you fit the criteria. 

If you need any adjustments to support you with your application, just drop us an email at talent@wearepion.com.

Requirements

About the role

As a result of our incredible success and growth, we are looking for a brand new InfoSec Manager to join our wider Legal and Data Protection team. You'll be working in partnership with our technical and legal teams to ensure we have a robust security infrastructure which evolves as we grow, and you will play a lead role in owning and developing our information security strategy.

In terms of day to day responsibilities, you will be covering the following areas:

• Ownership of the Cybersecurity Strategy: Develop and lead the best practice implementation of a cybersecurity strategy tailored to protect Pion's data, devices, networks, and systems. 
• Risk Assessment and Management: Regularly assess security risks across the organisation and advise on proactive measures to mitigate them, including policies, penetration testing and vulnerability assessments.
• Security Accreditation Adherence: Ensuring continued adherence to our security accreditations - ISO27001.
• Incident Response: Support the Data Protection Officer in overseeing the incident response plan, ensuring rapid containment and recovery from security breaches or attacks.
• Regulatory Compliance: Supporting the Data Protection Officer in ensuring regulatory compliance with relevant regulations (e.g.GDPR, CCPA, SOC 2, HIPAA).
• Device Security: Devising policies and implementing those with the support of Pion’s IT Manager to manage and implement tools and protocols to secure all devices connected to the Pion’s network (laptops, smartphones, servers, etc.), including anti-virus, encryption, and mobile device management
• Network Security: Setting the requirements for ensuring the security of the Pion’s internal and external networks, including managing firewalls, intrusion detection systems, virtual private networks and encryption.
• Cloud Infrastructure Security: Working with the Head of Platform to devise suitable policies for the management of Pion’s cloud-based infrastructure (AWS, Google Workspace).
• Data Encryption and Access Management: Working with Pion’s CTO, Head of Platform and IT Manager to ensure proper encryption of data at rest and in transit, and manage access controls using least privilege principles
• Cloud Identity and Access Management: Manage access policies, including multi-factor authentication, role-based access control and privileged access management.
• Threat Intelligence: Supporting the Data Protection Officer to lead initiatives to train and educate employees on best practices for data security, phishing prevention, password management and compliance with internal policies.
• Securing Reporting: Supporting the Data Protection Officer with materials and presentations shared with the Board of directors and/or the C-suite.

We’d really like to hear from you, if you have experience in the following:

• Playing a lead or integral role in overseeing an organisation’s cyber security efforts; and
• Designing and ensuring the effective implementation and future management of security measures.
• Exposure to remote first/companies both inside and outside of the UK
• Management  of network based security tools and understanding of network architecture. 
• Familiarity with all core operating systems including MacOs and Linux and cloud specific security tools. 
• Experienced in identifying system vulnerabilities.
• Understanding of encryption standards. 
• Understanding and previous experience of implementing and/or maintaining security standards, such as ISO27001. 
• Excellent communication skills across different teams
• Experience of delivering training and awareness of security policies and best practices to colleagues. 
• Experience of independently managing projects that may involve multiple stakeholders. 
• You must be able to work in a fast paced, high-growth environment and be equipped to deal with competing priorities and deadlines.

Benefits

Life at Pion

Let’s take a look at just a few things that make Pion an amazing place to work…

💰 Competitive salary

🌴 Unlimited holiday. We strongly believe in a healthy work life balance, so we don’t cap the number of paid time off days you take. By doing this, we hope to help promote a sustainable way to work while maintaining your health and wellbeing

🏆 Accredited 'Great Place To Work’ company in three categories https://www.greatplacetowork.co.uk/workplace/item/3545/Student+Beans
👩🏽‍💻 Remote first working environment, meaning you’re not obligated to come into the office, you can choose the environment you think you excel best in

📅 Flexi-time, including Flexi Friday which gives you the opportunity to finish at 1.30pm

❤️ Focus on welfare, including gym memberships, wellness challenges, mental health first aider and health cash plan

🛍️ Incredible partnership discounts for the biggest brands in the world. Google, Apple, Ted Baker, GymShark, Domino's and Uber to name a few!

🧠 Commitment to personal development and career growth. Think learning budgets, coaching workshops and progression plans

💻 £200 work from home set up allowance to put towards your home office

Want to know more? Check out our career site for everything you need to know about starting a career with Pion…

https://partner.studentbeans.com/about-us/careers/

Research shows that while men apply to jobs when they meet 60% of the requirements,

women and those in underrepresented groups tend to only apply when they tick every box. We don’t think you should have to tick every box. We value your uniqueness, and it goes without saying that all applications are welcome, even if you don’t think you fit the criteria.

If you need any adjustments to support you with your application, just drop us an email at talent@studentbeans.com.

Due to the high volume of applicants we can only respond to shortlisted applicants. By submitting your application, you agree that Pion may collect your personal data for recruiting, global organization planning, and related purposes. Our Applicant Privacy Notice explains what personal information and where we may process, our purposes for processing, and the rights you can exercise over Pions use of your personal information.

#LI-SC1

#LI-Remote