Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Zinc is scaling fast and needs to mature its information security function. We are hiring a Head of Information Security to own this function, define security standards for our scale, and build internal and external credibility. You will report to the General Counsel and collaborate with the AI & Automation lead in an environment where security enables the business. This is a step-up role for someone ready to own the function hands-on, embracing AI-native ways of working.

Responsibilities

Defining and owning the multi-year information security strategy roadmap
Reviewing and advising on security architecture and technical design decisions
Embedding security by design across products and platforms
Maintaining the risk register and identifying, prioritizing, and tracking risks
Managing compliance programs including ISO 27001 and SOC 2
Owning major incident response and acting as the first point of contact in a crisis
Partnering on AI security governance for safe AI adoption
Managing customer and supplier security questionnaires, diligence requests, and contractual requirements
Conducting third-party risk assessments and ongoing vendor monitoring
Developing and implementing security awareness training and fostering a security-conscious culture
Managing the InfoSec budget and investment cases aligned with Zinc's risk profile

Requirements

5+ years in information security
At least 2 years in a leadership or senior practitioner role (e.g., SOC management, security architecture, penetration testing, engineering)
Proven experience in building and implementing security solutions
Readiness to step up and own the information security function
Understanding of the security implications of LLMs, AI tooling, agentic workflows, shadow AI, and third-party SaaS risk
High emotional intelligence for leading team members
Strong communication skills to translate risk for non-technical audiences
Awareness of compliance standards, with a risk-led approach
Comfort with ambiguity and ability to develop new processes
Experience in a fast-growing global SaaS business (desirable)
Familiarity with DevSecOps and secure development lifecycle practices (desirable)
Relevant certifications such as CISSP, CISM, or similar (desirable)
Experience with cloud security (AWS, Azure, or GCP) (desirable)

Skills

Information Security Strategy
Security Architecture
Risk Management
Compliance Programs (ISO 27001, SOC 2)
Incident Management
AI Security Governance
Customer and Supplier Security
Third-Party Risk Management
Security Awareness Training
Budget Management
LLM Security
AI Tooling Security
Agentic Workflows Security
Shadow AI Security
SaaS Risk Management
DevSecOps
Secure Development Lifecycle
Cloud Security (AWS, Azure, GCP)

Location

Zinc - London

Work Type

Full Time

Experience Level

5+ years in information security
2+ years in a leadership or senior practitioner role

Salary/Compensations

£95,000 / year

Benefits

24 days holiday + Bank Holidays + birthday off
£1200 annual benefits allowance
Early finish Fridays (16:00)
Yearly company retreat abroad
30 days to Work from anywhere
Enhanced Maternity, Paternity, and Adoption Leave
Statutory pension with NEST
Zinc shares through EMI Scheme
Unlimited access to MoreHappi coaching
Company socials
Quarterly team socials
Free Monday lunches
Nursery workplace benefit scheme
Option to lease an electric car through Electric Car Scheme
Celebrated Zinc anniversaries

About the Company

Zinc has grown to 150+ people and is scaling fast.
Zinc offers a chance to work on a product that brings a fresh perspective on data ownership in hiring.