Head of Security (FinTech)

About the role

We are seeking a senior security leader to own the security posture of our Merchant Division. Reporting to the CIO, you will shape strategy, embed security across engineering, and ensure compliance with PCI DSS and SOX ITGC in a fast‑moving fintech environment.

Key responsibilities

• Define and maintain the enterprise security strategy and risk framework for the Merchant Division.
• Set security standards for new technology deployments and embed security reviews into solution design.
• Own the IAM governance framework, including role‑based access, privileged access policies and regular access reviews.
• Govern an AI security framework in partnership with the AI Champion.
• Run a 24×7 security operations centre, providing continuous threat detection, incident response and vulnerability management.
• Lead the penetration testing programme and ensure critical findings are remediated within SLA.
• Collaborate with the Head of Infrastructure, Cloud & DevOps and the Group ISO function to integrate security into platform engineering.

Required profile

• Proven experience leading security functions in regulated payments or fintech environments.
• Deep understanding of PCI DSS, SOX ITGC and other relevant compliance frameworks.
• Strategic thinker who can translate risk assessments into actionable controls.
• Strong leadership skills with experience managing a small security team.
• Ability to partner credibly with engineering and business stakeholders.

Required skills

• PCI DSS compliance
• SOX ITGC compliance
• Identity and Access Management (IAM)
• Vulnerability management
• Penetration testing
• Threat detection and incident response
• AI security framework
• Security Operations Center (SOC) management