> Markdown version of [/jobs/ext/1475125-head-of-information-and-cyber-security](https://www.wearedevelopers.com/jobs/ext/1475125-head-of-information-and-cyber-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of Information and Cyber Security - **Company:** Flexys Solutions - **Location:** UK (Remote available) - **Experience:** Expert - **Salary:** £75,000.0 - £85,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Software System Penetration Testing, Software as a Service, Cloud Engineering, Cyber Security, Disaster Recovery, PCI Data Security Standards, Software Vulnerability Management, Information Security Management System, Google Cloud, Containerization, Kubernetes, Vulnerability Analysis - **Published:** July 29, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=c9929eb5898f82cd ## About the Role * Proven experience in a senior information security role (e.g., InfoSec Manager, Senior InfoSec Analyst). * Deep, practical expertise in developing, implementing, and managing an ISO 27001 certified ISMS. * Expert-level knowledge and hands-on experience leading assessments against the PCI DSS v4 standard, preferably for a cloud-nativeservice provider. * A strong, fundamental understanding of modern cloud security principles and architectures. * Excellent communication skills, with the ability to articulate complex security concepts to technical teams, senior management, and clients with clarity and confidence. Desirable * Hands-on experience securing GCP environments is highly desirable. * Practical knowledge of container security and orchestrators like GKE. * Experience working in a fast-paced FinTech or SaaS environment. * Relevant industry certifications (e.g., CISSP, CISM, CISA, or a GCP Security certification). ## Description As the senior security leader in the business, you will be responsible for providing the vision, strategy, and execution for all aspects of security and data protection. This is a high-impact role where you will be the go-to expert for our teams, clients, and partners, ensuring our cutting-edge platform remains secure, compliant, and resilient against emerging threats. You will report directly to senior management and play a key part in our continued growth and success., * Lead and maintain our ISO 27001 certified Information Security Management System (ISMS), driving a culture of continuous improvement. * Own and manage our annual PCI-DSS v4 assessment, acting as the primary point of contact for our QSA. * Develop and execute the security roadmap, evaluating and implementing new tools and technologies to enhance our security posture. * Oversee our comprehensive vulnerability management program, including managing third-party penetration tests and interpreting results from vulnerability scanning. * Own and enhance our third-party supplier security due diligence program. * Develop, review, and maintain our suite of security policies, procedures, and our Disaster Recovery and Business Continuity plans. * Act as the primary security subject matter expert for prospective clients, auditors, and internal teams. * Provide leadership and technical guidance on the security of our modern, cloud-native environment, built on Google Cloud Platform (GCP) and Kubernetes (GKE). ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Kubernetes Security Best Practices](https://www.wearedevelopers.com/videos/1411-kubernetes-security-best-practices) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Kubernetes Security - Challenge and Opportunity](https://www.wearedevelopers.com/videos/412-kubernetes-security-challenge-and-opportunity) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Learning Kubernetes made easy with KubeCampus](https://www.wearedevelopers.com/magazine/348-learning-kubernetes-made-easy-with-kubecampus) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)