Head of Information Security & Controls

Wallstreetdocs Ltd; Frankfurt; Hybrid; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

A leading provider in document and workflow automation seeks a Head of Information Security & Controls to define and maintain their security strategy, ensuring compliance and operational excellence. This senior role demands strategic vision, technical expertise, and cross-functional collaboration in a dynamic fintech environment.

Leistungen

Flexible, hybrid working model

Strong career development opportunities

Qualifikationen

• Proven experience in a senior information security role, ideally within fintech or SaaS.
• Strong understanding of ISO/IEC 27001, SOC, SIEM, vulnerability management.
• Experience managing external audits and client compliance engagements.

Aufgaben

• Own and deliver WSD’s security strategy and roadmap.
• Oversee all technical security controls across infrastructure.
• Ensure compliance with ISO/IEC 27001:2022 certification.

Kenntnisse

Stakeholder management

Communication skills

Risk management

Ausbildung

CISSP

CISM

ISO Lead Auditor

Jobbeschreibung

About WSD

WSD is a leading provider of document and workflow automation software for the global structured products industry. With a strong presence in the financial services sector, WSD supports tier-one banks and asset managers by delivering scalable, secure, and cloud-agnostic solutions that streamline operations from inception to maturity. Backed by private equity and headquartered in London, WSD combines deep domain expertise with cutting-edge technology to drive operational excellence and regulatory compliance.

Role Overview

As Head of Information Security & Controls, you will be responsible for defining, implementing, and maintaining WSD’s security strategy, governance framework, and operational security controls. This is a senior leadership role requiring strategic vision, hands-on technical oversight, and cross-functional collaboration across engineering, compliance, and client-facing teams.

Key Responsibilities

Strategic Leadership

• Own and deliver WSD’s security strategy and roadmap.
• Lead the development and maintenance of security and governance policies, standards, procedures, and configurations.

Security Operations

• Oversee all technical security controls across infrastructure, endpoints, and mobile devices.
• Manage the Managed Detection & Response (MDR) service including SIEM/SOC/alerting.
• Lead Threat & Vulnerability Management using Qualys VMDR.
• Oversee Web Application Scanning (Qualys WAS) and Static Code Analysis (SonarQube).
• Direct the Security Incident Management process and ensure timely resolution.

Compliance & Risk Management

• Maintain ISO/IEC 27001:2022 certification and ensure ongoing compliance.
• Lead risk management activities including risk assessments and mitigation planning.
• Manage external security assessments and ensure timely remediation.
• Serve as the principal authorizer for policy exceptions, privileged access, and critical security decisions.

Governance & Vendor Oversight

• Manage vendor relationships and ensure third-party compliance with WSD’s security standards.
• Oversee escrow arrangements and change management processes.

Business Continuity & Disaster Recovery

• Ensure BC & DR plans are current, tested, and effective.
• Lead BC & DR testing and remediation activities.

Client & Regulatory Engagement

• Respond to client security questionnaires and audits with accuracy and professionalism.
• Liaise with client-side security, risk, vendor, compliance, and audit teams.

Team Leadership

• Manage and mentor a small, high-performing Security team.
• Foster a culture of security awareness and continuous improvement across the organisation.

PreSales / Contract Reviews

• Support pre-sales and onboarding processes by defining security requirements and participating in due diligence discussions.
• Act as the security authority for reviewing data processing agreements, SLAs, and regulatory obligations tied to client engagements.

Qualifications & Experience

• Proven experience in a senior information security role, ideally within fintech or SaaS.
• Strong understanding of ISO/IEC 27001, SOC, SIEM, vulnerability management, and secure SDLC.
• Experience managing external audits, pen tests, and client compliance engagements.
• Excellent stakeholder management and communication skills.
• Relevant certifications (e.g., CISSP, CISM, ISO Lead Auditor) are highly desirable.

Why Join WSD?

• Be part of a mission-critical team powering the structured products industry.
• Work with cutting-edge technologies in a cloud-agnostic environment.
• Collaborate with experienced professionals in a fast-paced, innovative culture.
• Enjoy a flexible, hybrid working model and strong career development opportunities.
  
  

If you have the skills, experience and drive to excel in this challenging and rewarding role, we would love to hear from you. Apply today and take the next step in your career with us!

WSD is an employer that values diversity.We highly encourage applications from appropriately qualified and eligible candidates irrespective of age, race, religion, national origin, gender, sexual orientation, gender identity and/or expression,veteranstatus, disability, or any other status protected by applicable law.