Remote InfoSec Engineer: Path to CISO

Tangible; United Kingdom; On-site; GBP 90,000 - 150,000; Full time

Benefits offered by this job

Ownership of security program

Fully remote

Learning budget

Direct access to leadership

Job summary

Tangible is seeking its first dedicated information security hire to lead security across AWS, IaC, and audits while working fully remotely. The role will evolve toward CISO as the company scales, interacting with engineering, product, and leadership.

You will own security controls, incident response, and vendor risk in a fast-growing fintech-adjacent environment. You will build robust detection, automation, and governance, collaborating with auditors and financial-institution clients to provide

Qualifications

• 5+ years in security engineering or security-heavy infrastructure.
• Depth in AWS security (IAM, SCPs, logging, detection, encryption).
• Python and Terraform, or close equivalents; automate evidence collection.
• SOC 2 experience, ideally owning a Type II audit; privacy legislation knowledge.
• Exposure to financial-services customer scrutiny or the drive to specialize.
• LLM security awareness and ability to discuss risk with engineers and auditors.
• Judgment on which risks matter; ability to justify controls to auditors.
• Clear writing for async remote communication and policy memos.
• Ambition to grow into an executive role and people skills to sustain it.

Responsibilities

• Own security in our AWS environment: IAM, least privilege, network segmentation, encryption, logging and detection.
• Build security into the development pipeline: secrets management, scanning, threat modelling.
• Automate detection rules, alerting, evidence collection, and IaC guardrails.
• Run vulnerability management, incident response, and runbooks.
• Define rules for AI/LLM usage: data handling, model approvals, prompts logging.
• Own SOC 2: control design, automated evidence collection, auditor liaison.
• Handle regulatory duties for financial‑institution customers: GDPR, CCPA, DORA, etc.
• Lead customer security reviews: due diligence, RFPs, contract security terms.
• Run vendor reviews and third-party risk; build security awareness training.
• Over time: set security strategy, report risks, budget, hire.

Skills

AWS security

Python

Terraform

SOC 2

Privacy laws

LLM security

Auditing

Risk communication

Writing skills

Leadership potential

Tools

GuardDuty

Security Hub

CloudTrail

Job description

Tangible is seeking its first dedicated information security hire to lead security across AWS, IaC, and audits while working fully remotely. The role will evolve toward CISO as the company scales, interacting with engineering, product, and leadership.

You will own security controls, incident response, and vendor risk in a fast-growing fintech-adjacent environment. You will build robust detection, automation, and governance, collaborating with auditors and financial-institution clients to provide