Head of Information Security

About the roleCalamatta Cuschieri Moneybase is a unified established brand, expanding across payments, global investing, wealth management, and business banking, and changing how people invests and manages money. Social and digital are where much of that story gets told.We’re looking for an experienced Head of Information Security to support and strengthen our Information Security Programme, working across security operations, vulnerability management, access governance, compliance, and technical security.The Head of Information Security owns the Group’s security programme day to day. In this role, you will lead a small SecOps and security engineering team, and you will be the senior security voice in the Group. You will set the security standards that Systems and Engineering build to, and independently check that they are met.Key responsibilities:Monitor and investigate security events and support incident responseCoordinate vulnerability assessments, penetration testing, patching and remediationProvide security guidance across infrastructure, cloud, applications and technology projectsManage access governance, privileged access reviews and least-privilege controlsSupport security audits, risk assessments and regulatory complianceContribute to Business Continuity, Disaster Recovery and cyber incident exercisesProduce security metrics, dashboards and recommendations for stakeholdersSecurity strategy, roadmap and budget for the security functionSecurity policies, standards and the CIS Controls baselineDetection, incident response and the MDR relationshipAccess governance, privileged access and PIM designVulnerability prioritisation and remediation SLAsCloud security postureSecurity review of high-risk changesSecurity awarenessSecurity risk reportingWhat we’re looking for:5+ years in information security, with at least 3 years leading a security team or function.Hands-on knowledge of SIEM, SOAR, EDR, vulnerability management, IAM, cloud security and patch management, DORA related requirements and with incident response.Strong understanding of incident response, networking, operating systems, authentication, encryption and secure design.Strong Azure and Microsoft 365 security: Entra ID, Conditional Access, PIM and Defender for Cloud.Experience managing MDR or MSSP providers and penetration-testing suppliers.Experience presenting security risk to executives and boards in plain language.Experience supporting security audits and remediation initiatives.Relevant security certification or equivalent practical experience.Highly desirable:Financial services or regulated environment experienceKnowledge of PCI DSS, SWIFT, ISO 27001, CSP and DORAExperience with Zero Trust, Conditional Access and Privileged Identity ManagementWhat we offer:Ongoing internal trainingStudy LeaveSponsorship schemes for further studiesOpportunities for career growthVariable bonus linked to KPIOur Values:🚀Innovation – Stay Curious, Move Fast🔒Integrity – Do What’s Right, Always🎯Accountability – Own It, Fix It, Learn🤝Collaboration – Win Together🌍Respect – Value Every Voice