Information Security Officer

- Owning our ISO 27001 ISMS and ensuring it is always-on, including managing internal audits, evidence, management reviews, corrective actions, and external audit readiness - Running security risk management that leads to decisions by maintaining a living risk register, driving mitigations, and enabling explicit risk acceptance when needed - Driving security governance with practical policies and standards for access, data handling, vendor risk, and incident response - Leading security incident governance, including classification, escalation, post-incident learning loops, and preventing repeats in partnership with relevant teams - Managing third-party and vendor security risk, including risk tiering, due diligence, and working with Legal on security requirements and ongoing assurance - Enabling safe use of AI and agentic workflows by setting clear guardrails for AI tooling and automation - Participating in architecture decisions with security impact as a required security reviewer - Providing clear updates to leadership on security posture, top risks, incidents, audit outcomes, and progress