Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Head of Security role.
Rezi rewrites your resume against Aptitude Software's job description. Free.
Tailor your resume to this Head of Security role.
Rezi rewrites your resume against Aptitude Software's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Head of Security posting at Aptitude Software — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Head of Security posting at Aptitude Software — free, in seconds.
About the Role
You will own security at Aptitude Software, encompassing product and cloud security, internal and corporate security, governance, risk and compliance, third-party and vendor security, business continuity and disaster recovery, and the security tooling estate. You will build these into one function with one owner, one set of priorities and one source of truth, serving as the primary point of contact for customers, auditors, the executive team, and the board on security matters. You report to the CPTO and are part of the technology leadership team.
Responsibilities
- Define and own the security strategy and roadmap, reporting to the executive team and board.
- Establish and report clear, simple security metrics.
- Own the information security risk register and committee agenda.
- Own security policy end-to-end, including vulnerability management, version support, and secure development.
- Manage the security budget and justify investment needs.
- Own security across the product estate, including Fynapse, established accounting products, and the payments platform.
- Set standards for secure design, build, and release gating, integrating them into the delivery pipeline.
- Manage vulnerability management as a unified process across all products.
- Own ISO 27001, SOC 1, SOC 2, and PCI DSS compliance, including the audit calendar and auditor relationships.
- Collaborate with legal and Data Protection Officer on data protection, residency, sub-processors, and customer contractual security commitments.
- Own the business continuity and disaster recovery program, including testing and remediation.
- Lead, develop, and retain a team of four security professionals.
- Act as a sparring partner to leadership, challenging design decisions and advocating for appropriate risk trade-offs.
- Contribute to technology strategy, ensuring security is integrated into customer migration plans.
Requirements
- A career in security with hands-on technical experience prior to leadership.
- Fluency in concepts such as threat modeling, vulnerability management, cloud security architecture, identity and access, secure software development, and detection and response.
- Experience leading a security team, including line management, development, and retention of specialists.
- Experience running security in a software or SaaS company serving regulated enterprise customers.
- Experience facing customers on security matters.
- Working knowledge of ISO 27001 and SOC 2, with experience being accountable for audits and certifications.
- Practical understanding of cloud security on AWS and Azure, Kubernetes-based platforms, infrastructure as code, and modern CI/CD.
- Experience owning or running third-party and vendor risk management.
- The judgment to distinguish theoretical from practical risk and prioritize accordingly.
- Clear, direct communication in writing and in person.
Skills
- Threat modeling
- Vulnerability management
- Cloud security architecture
- Identity and access management
- Secure software development
- Detection and response
- ISO 27001
- SOC 2
- PCI DSS
- AWS
- Azure
- Kubernetes
- Infrastructure as Code
- CI/CD
- Third-party risk management
- Vendor risk management
Location
- London
- UK
- Poland
Work Type
- Hybrid
- Permanent
- Full-time
Experience Level
- Leadership
- Management
About the Company
- Aptitude Software builds finance and accounting software for large, regulated organizations like banks, insurers, and telecoms operators.
- Our flagship product, Fynapse, is a cloud-native accounting platform on Kubernetes across AWS and Azure.
- We also offer established accounting, revenue recognition, lease accounting, and insurance calculation products, deployed as SaaS and on-premise.
- Our business includes a subscription billing and payments platform handling payment card data.
- Our customers are highly security-conscious and require adherence to strict security standards and regulations such as DORA.