Head of Security

Edenred; Swindon; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

25 days annual leave

Hybrid working environment

Pension Scheme

Discretionary bonus

Medical & international travel cover

Life insurance

Wellbeing Employee Assistance Program

Monthly gym allowance

Holiday trading scheme

Season ticket loan

Cycle to Work scheme

Employee discount shopping platform

Employee referral bonus scheme

Digital learning platform

Complimentary fruit and other snacks

Volunteering programme

Social events

Job summary

Edenred PayTech, part of the Edenred group, seeks a Head of Information Security to lead and advance our security posture in a fast-evolving FinTech landscape. You will define and implement strategy to protect data, ensure regulatory compliance, and manage risk across a multi-country environment.

As a senior leader, you will direct a team of about 6 security professionals, collaborate with Security Ops, and report to Executive Leadership and the Group CISO.

Qualifications

• Senior information security leadership experience.
• Proven hands-on experience managing PCI DSS and other compliance programs.
• Experience in complex corporate structures with multi-stakeholder compliance demands.
• Strong background in developing security governance frameworks and policies.
• Experience with financial services, FinTech, or payments sector preferred.
• Familiarity working with financial crime, fraud, and AML functions.
• Experience managing risks associated with emerging technologies like AI/ML.

Responsibilities

• Lead the PayTech Information Security function with alignment to Edenred's wider cyber risk management strategy.
• Develop and enhance security policies, standards, and procedures across the organisation.
• Manage the information security risk program, maintaining a comprehensive risk register.
• Oversee AI/ML security risk management, including the development of policies for generative AI technologies.
• Collaborate with Financial Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime.
• Manage third-party security risk due diligence programs.
• Lead and maintain PCI DSS and PCI PIN compliance and engagement with QSAs.
• Drive cyber awareness programs and phishing simulations to embed a security-aware culture.
• Manage security incident response planning and coordinate with SOC.
• Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program status and risks.
• Lead a team of approximately 6 security professionals.

Skills

Security leadership

PCI DSS

Cloud security

IAM

Regulatory compliance

AI/ML security

Leadership

Education

CISSP

CISM

PCIP

QSA qualifications

Tools

AWS

Azure

GCP

QSA tools

Job description

Take a step forward and let Edenred surprise you.

Every day, we deliver innovative solutions to improve the life of millions of people, connecting employees, companies, and merchants all around the world.

We know there are hundred ways for you to grow. With us, you will expand your skills in a multicultural, challenging, and dynamic environment.

Dare to join Edenred and get ready to thrive in a globalcompany that will offer you endless opportunities.

Edenred is all about meritocracy. You come as you are, and you contribute. Indeed, the Edenred Group recognizes, recruits and develops all talents and singularities.

We are committed to preventing all forms of discrimination and to providing all our candidates with equal opportunities regardless of their gender and gender expression, disability, origin, religious belief and sexual orientation or any other criteria.

Head of Information Security

Location: Swindon/London
Type: Full-time, Senior Leadership Role

About PayTech:

Join PayTech, a leading FinTech company within the Edenred group, committed to securing innovative payment technologies and protecting critical customer and company data. We are looking for an experienced and strategic Head of Information Security to lead and advance our security posture in a fast-evolving technological and regulatory landscape.

Role Overview:

As the Head of Information Security, you will be a senior leader responsible for defining, implementing, and maintaining PayTech's information security strategy. You will protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements.

Key Responsibilities:

• Lead the PayTech Information Security function with alignment to Edenred's wider cyber risk management strategy.

• Develop and enhance security policies, standards, and procedures across the organisation.

• Manage the information security risk program, maintaining a comprehensive risk register.

• Oversee AI/ML security risk management, including the development of policies for generative AI technologies.

• Collaborate with Financial Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime.

• Manage third-party security risk due diligence programs.

• Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs).

• Drive cyber awareness programs and phishing simulations to embed a security-aware culture.

• Manage security incident response planning and coordinate with Security Operations Centre (SOC).

• Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program status and risks.

• Lead a team of approximately 6 security professionals.

Qualifications & Experience:

• Solid experience senior information security leadership roles.

• Proven hands-on experience managing PCI DSS and other compliance programs.

• Experience in complex corporate structures with multi-stakeholder compliance demands.

• Strong background in developing security governance frameworks and policies.

• Experience with financial services, FinTech, or payments sector preferred.

• Familiarity working with financial crime, fraud, and AML functions.

• Experience managing risks associated with emerging technologies like AI/ML.

Desired Certifications:

• CISSP (Certified Information Systems Security Professional) – highly desired

• CISM, PCIP, ISA, or QSA qualifications are advantageous.

Skills:

• Strong leadership and mentoring capabilities.

• Deep technical knowledge in network security, cryptography, IAM, and cloud security (AWS, Azure, GCP).

• Excellent communication skills, able to convey complex security topics to non-technical stakeholders.

• Pragmatic, calm, and resilient under pressure during incident management.

Why Join Us?

Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies and data, contribute to innovative AI risk frameworks, and help shape the future of PayTech's secure growth.

What you will get:

• 25 days annual leave plus Bank Holidays

• Hybrid working environment (min. 3 days per week in the office)

• Pension Scheme - employer 6% with minimum employee contribution 3%

• Discretionary bonus scheme based on company and personal performance

• Medical & international travel cover (leisure and action sports)

• Life insurance (4x salary)

• Wellbeing Employee Assistance Program (extended access to family members)

• Monthly gym allowance

• Holiday trading scheme

• Season ticket loan

• Cycle to Work scheme

• Employee discount shopping platform

• Employee referral bonus scheme

• Digital learning platform

• Complimentary fruit and other 'in office' snacks & refreshments

• Volunteering programme

• Social events

Diversity:

Edenred PayTech are proud to be an equal opportunity employer. We will not discriminate against any applicant or employee based on age, race, colour, creed, religion, sex, sexual orientation, gender, gender identity or expression, national origin, citizenship, marital status or civil partnership/union status, disability, pregnancy, genetic information, or any other basis prohibited by applicable country or local laws.