Director, Information Security – Continuous Exposure Management

We’re seeking a future team member for the role of Director, Information Security – Continuous Exposure Management to join our team. This role is located in London.

In this role, you’ll make an impact in the following ways:

Act as product owner for our exposure management framework. You’ll set the vision, roadmap and backlog, and prioritize work by risk reduction and business value

Use product management skills at an organizational level to drive change. That means building the case for change, aligning senior stakeholders and helping teams across the firm adopt new ways of working

Use AI to transform how we identify, prioritize and remediate exposure. You’ll find where AI can automate or speed up our processes, and take those uses from proof of concept to live service

Plan and run delivery sprints: define clear outcomes, manage dependencies, remove blockers, and report progress to stakeholders and senior leadership

Work across cyber engineering, application security, technology, risk and governance teams to achieve shared outcomes

Integrate new security solutions into existing frameworks, controls and workflows so they add value without creating friction for delivery teams

Evolve and iterate processes, frameworks and technology at pace, using data, metrics and feedback to measure impact and decide what to change next

Make sure changes meet policy, regulatory and compliance requirements, and that controls stay effective as the framework evolves

Analyze security data and assessments to give senior stakeholders insights, conclusions and actionable recommendations

To be successful in this role, we’re seeking the following:

Bachelor’s degree in computer science or a related discipline, or equivalent work experience required; advanced degree preferred

Extensive experience in information security or related technology required. This includes a strong understanding of cyber security frameworks (such as NIST CSF, ISO 27001, CIS Controls or Continuous Threat Exposure Management (CTEM)) and their related tooling and technology

Proven product management experience at an organizational level, including owning a roadmap and backlog and delivering change across multiple teams

Hands-on experience running agile delivery (Scrum, Kanban or similar), including sprint planning, backlog management and measuring outcomes

Experience using AI or automation to transform processes, with a practical understanding of where AI adds value and where it doesn’t

Experience in exposure or vulnerability management, application security testing or security control frameworks is highly desirable

Experience in the securities or financial services industry is a plus

Strong leadership presence and interpersonal skills, with the ability to influence without direct authority

Excellent communication and stakeholder engagement across time zones and cultures

Results-oriented with a focus on delivery, accountability and quality, and comfortable working at pace in a changing environment