About The Company

Calamatta Cuschieri Moneybase plc is a privately held Fintech Group that operates in Investment Services, Fund Administration, Online Investing, and Payments. With roots dating back to 1971, the Group today is evolving at a fast pace whilst keeping the same core principles, that of providing clients the best service using the latest technology and the top professionals in their field, whilst ensuring the strong governance and ethics.

We are committed to attracting and selecting the very best people to join our team and to creating a workplace that promotes individual career growth; we value our people and their well-being. The group employs over 210 people from over 27 countries around the world with Assets Under Management and Administration of over 3 billion.

About The Role

Calamatta Cuschieri Moneybase is a unified established brand, expanding across payments, global investing, wealth management, and business banking, and changing how people invests and manages money. Social and digital are where much of that story gets told.

We’re looking for an experienced Head of Information Security to support and strengthen our Information Security Programme, working across security operations, vulnerability management, access governance, compliance, and technical security.

The Head of Information Security owns the Group’s security programme day to day. In this role, you will lead a small SecOps and security engineering team, and you will be the senior security voice in the Group. You will set the security standards that Systems and Engineering build to, and independently check that they are met.

Key Responsibilities

Monitor and investigate security events and support incident response
Coordinate vulnerability assessments, penetration testing, patching and remediation
Provide security guidance across infrastructure, cloud, applications and technology projects
Manage access governance, privileged access reviews and least-privilege controls
Support security audits, risk assessments and regulatory compliance
Contribute to Business Continuity, Disaster Recovery and cyber incident exercises
Produce security metrics, dashboards and recommendations for stakeholders
Security strategy, roadmap and budget for the security function
Security policies, standards and the CIS Controls baseline
Detection, incident response and the MDR relationship
Access governance, privileged access and PIM design
Vulnerability prioritisation and remediation SLAs
Cloud security posture
Security review of high-risk changes
Security awareness
Security risk reporting

What We’re Looking For

5+ years in information security, with at least 3 years leading a security team or function.
Hands-on knowledge of SIEM, SOAR, EDR, vulnerability management, IAM, cloud security and patch management, DORA related requirements and with incident response.
Strong understanding of incident response, networking, operating systems, authentication, encryption and secure design.
Strong Azure and Microsoft 365 security: Entra ID, Conditional Access, PIM and Defender for Cloud.
Experience managing MDR or MSSP providers and penetration-testing suppliers.
Experience presenting security risk to executives and boards in plain language.
Experience supporting security audits and remediation initiatives.
Relevant security certification or equivalent practical experience.

Highly Desirable

Financial services or regulated environment experience
Knowledge of PCI DSS, SWIFT, ISO 27001, CSP and DORA
Experience with Zero Trust, Conditional Access and Privileged Identity Management

What We Offer

Ongoing internal training
Study Leave
Sponsorship schemes for further studies
Opportunities for career growth
Variable bonus linked to KPI

Our Values

🚀Innovation – Stay Curious, Move Fast

🔒Integrity – Do What’s Right, Always

🎯Accountability – Own It, Fix It, Learn

🤝Collaboration – Win Together

🌍Respect – Value Every Voice

By submitting this application, I confirm that all the information given by me in this application for employment and any additional documents attached hereto are true to the best of my knowledge and that I have not wilfully suppressed any material fact. I confirm I have disclosed if applicable any previous employment with Calamatta Cuschieri Moneybase Plc. I accept that if any of the information given by me in this application is in any way false or incorrect, my application may be rejected, any offer of employment may be withdrawn or my employment with Calamatta Cuschieri Moneybase Plc may be terminated summarily or I may be dismissed. By submitting this application, I agree that my personal data will be processed in accordance with Calamatta Cuschieri Moneybase Plc's Candidate Privacy Notice

Head of Information Security

Job Description