• Own information security across the company • Define and maintain the security strategy, roadmap, and risk posture • Identify, assess, prioritize, and drive remediation of security risks • Build a strong security culture and awareness within the organisation • Ensure proper security policies, standards and guidelines are in place • Partner with Engineering and DevOps to ensure security of architecture, cloud, APIs, data flows and define secure SDLC practices • Own incident response process endtoend, including plans, coordination, and postincident improvements • Act as the main contact point for incidents • Own and manage regulatory and compliance programs (financial regulation, GDPR, future PCI DSS/and or ISO certifications) • Lead audits, assessments, and interactions with regulators and auditors • Provide clear reporting to leadership and be able to assess security risks in business terms