Information Security Team Lead

Flagstone; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid London office

Bonus scheme

Benefits budget

Salary sacrifice options

Work abroad eligibility

Mental wellbeing support

Development budget

Private health care

Medical cash plan

Life insurance & income protection

Pension contributions

Annual leave and holidays

Job summary

Flagstone is a London-based online savings platform seeking a senior security leader to build and scale a capable team. You’ll embed security across technology and product, lead governance and incident response, and drive continuous improvement of controls. You’ll partner with Technology, Risk, Compliance, and Product to protect business and customers.

You’ll own hiring and development within the security function, shaping strategy to meet regulatory expectations and business goals.

Qualifications

• Proven information security experience in regulated or complex environments.
• Track record of leading, coaching, and developing analysts.
• Strong leadership presence and influencing across engineers to executives.
• Experience embedding AI governance and risk/control frameworks for AI.
• Deep knowledge of ISO 27001, NIST, OWASP, CIS and related practices.
• Strong security risk management, governance, and incident response.
• Cloud security expertise (Azure preferred) and IAM fundamentals.
• Hands-on vulnerability management and remediation across estates.
• Excellent communication translating risk to technical and non-technical audiences.
• Proactive, improvement-focused mindset with stakeholder collaboration.

Responsibilities

• Lead, coach, and grow a security analytics team as we scale.
• Shape and deliver Information Security strategy aligned with goals.
• Embed secure-by-design across technology and product delivery.
• Govern risk management and control effectiveness day to day.
• Run and improve ISMS to support security controls and initiatives.
• Drive ongoing improvements of security processes, tooling, and standards.
• Lead security incident response and post-incident reviews.
• Partner with stakeholders to plan, prioritise, and resource security work.
• Own hiring, onboarding, and development within the security team.

Skills

People leadership

Security strategy

Coaching analysts

AI governance

Security frameworks

Cloud security

Risk management

Incident response

Stakeholder communication

Tools

SIEM

EDR

DLP

IDP

IPS

Job description

What is Flagstone?

Flagstone is many things. An online savings platform, reinventing how individuals, businesses, and charities manage, protect, and grow their cash. A diverse group of people, bound by a collaborative spirit, and shared purpose. And lastly, a thriving, profitable business – where smart people do their best work.

Each definition shares a common thread: our unique culture. It’s our pride and joy. And our competitive advantage.

A feel for our culture:

To revolutionise the savings market, we need to be at our best. But high performance takes more than talent – it takes a culture of kindness, respect, and growth.

That’s why we’re building a diverse, inclusive community, where your voice is heard and valued. Where, with close support and room to develop, you can surpass even your own expectations. And be rewarded for it.

We may not change the world, but we can change the world of financial technology. And all it takes is a winning mix of drive, talent, and empathy. Our culture celebrates all three.

Does this sound like you?

You’re an experienced security leader who enjoys building capable and effective teams while embedding security into everyday technology and business processes. You’re comfortable balancing hands on input with coaching, strategy, and operational management.

You can clearly explain the “why” behind security controls, work collaboratively across Technology, Risk, Compliance, and Product, and take a proactive approach to managing risk, incidents, and continuous improvement.

What you’ll do:

• Lead, coach, and grow a team of security analysts, and build the function as we scale.
• Shape and deliver the Information Security strategy, keeping it aligned to business goals and regulatory expectations.
• Embed "secure by design" across technology and product delivery, so security is built in, not bolted on.
• Be responsible for security governance, risk management, and control effectiveness, driving them day to day.
• Run and continuously improve our ISMS as the backbone for our security controls and initiatives.
• Drive ongoing improvement of our security processes, tooling, and standards.
• Lead security incident response and post-incident reviews, turning lessons into stronger defences.
• Partner with stakeholders across the business to plan, prioritise, and resource security work.
• Own hiring, onboarding, and development within the security team.

What you’ll bring:

Proven Information Security experience in a regulated or complex environment (financial services / FCA exposure a strong plus).

• A track record of leading, coaching, and developing analysts.
• Strong leadership presence and the ability to influence across all levels, from engineers to executives, building buy-in for security without relying on authority alone.
• Demonstrable experience embedding AI governance, having defined and operationalised risk and control frameworks for the secure, responsible adoption of AI.
• Deep knowledge of security frameworks and security best practice (ISO 27001, NIST, OWASP, CIS).
• Strong command of security risk management, governance, and incident response.
• Cloud security expertise (Azure preferred), network security, and identity and access management (IAM), with fluency across modern tooling e.g. SIEM, EDR, DLP, IDP, IPS.
• Hands-on experience with vulnerability management, identifying, prioritising, and driving remediation across the estate.
• Strong communication skills, with the ability to translate complex security risk into clear, actionable terms for both technical and non-technical audiences.
• A proactive, improvement-focused mindset and excellent stakeholder collaboration.

How we reward you:

At Flagstone, the benefits extend beyond false gifts like “fruit and snacks”. Instead, we invest in your health, wealth, and professional development. Here’s a selection of our benefits:

• Hybrid working - Spend at least 1 day a week with your team in our collaborative London office.
• Competitive bonus scheme - designed to reward and recognise high performance.
• Flexible benefits budget - a pot to fund meaningful benefits for you, whether it's hormone or fertility testing, cancer screening, neuro-diversity coaching or something that matters for you.
• A range of salary sacrifice options to help you make tax efficient savings on electric cars, nursery schemes, home and tech goods.
• Working Abroad - Employees can work remotely from an approved list of locations for up to 90 days a year
• Mental wellbeing support – Access therapy and mental health sessions through Spill.
• Learning and development – £1,000 personal development budget to help you grow in your role.
• Private health care - Enjoy all the benefits AXA has to offer, including reduced gym memberships and medical history disregarded.
• Medical cash plan - To help you with the costs of dental and optical expenses.
• Life insurance and Income Protection- four times your annual salary for peace of mind.
• Matched pension contributions up to 5%.
• 25 days holiday - plus bank holidays, well-being days and volunteering days.
• Enhanced Parental Leave – enhanced maternity, paternity and adoption pay.

All are welcome.

At Flagstone, we’re assembling a diverse team that defies our industry’s norms.