Remote Head of Information Security & Compliance

Flexys Solutions; United Kingdom; Remote; GBP 75,000 - 85,000; Full time

Job summary

Flexys Solutions is seeking a strategic Head of Information and Cyber Security to own and mature the security and compliance programme. This remote (UK-based) role leads the vision, strategy, and execution across information security, data protection, and related governance, reporting to senior management.

The role requires senior InfoSec leadership, expertise in ISO27001 and PCI-DSS v4, and strong cloud security knowledge. Start Oct 2026 or sooner, depending on notice period.

Qualifications

• Senior information security leadership experience
• Experience developing and managing ISO 27001 ISMS
• Expertise leading PCI-DSS v4 assessments for cloud-native providers
• Strong understanding of cloud security principles and architectures
• Excellent communication to technical teams, management, and clients

Responsibilities

• Lead and maintain ISO 27001 ISMS and drive continuous improvement culture
• Own and manage PCI-DSS v4 assessment, point of contact for QSA
• Develop and execute a security roadmap; evaluate new tools/technologies
• Oversee vulnerability management incl. third-party pen tests and scans
• Own third-party supplier security due diligence program
• Develop, review, and maintain security policies, DR/BCP plans
• Act as security SME for clients, auditors, and internal teams
• Provide leadership on security of cloud-native environment (GCP, Kubernetes)

Job description

Flexys Solutions is seeking a strategic Head of Information and Cyber Security to own and mature the security and compliance programme. This remote (UK-based) role leads the vision, strategy, and execution across information security, data protection, and related governance, reporting to senior management.

The role requires senior InfoSec leadership, expertise in ISO27001 and PCI-DSS v4, and strong cloud security knowledge. Start Oct 2026 or sooner, depending on notice period.