Business Security Director

INFORMATION SECURITY OFFICER Location: London Department: Risk and Compliance Reporting to: Head of Risk and Compliance ABOUT NEXGEN CLOUD: NexGen Cloud is the company behind Hyperstack, a full-stack AI cloud serving tens of thousands of customers from AI researchers to enterprises running the world's most compute-intensive workloads. We deliver on-demand and private GPU infrastructure to teams who treat performance as a requirement, not a feature. We're a tight-knit, fast-moving team working at the cutting edge of AI cloud infrastructure. We practice what we preach, equipping our people with AI at every level so we can solve harder problems, ship faster, and keep raising the bar for what enterprise GPU infrastructure looks like. THE ROLE: INFORMATION SECURITY OFFICER This role exists because as we scale our infrastructure and customer base, protecting the systems, data, and trust that underpin Hyperstack is a business-critical priority. You'll have direct ownership over NexGen Cloud's information security posture — from policy and risk frameworks through to incident response and compliance programmes. This is a role for someone who operates independently, thinks in systems, and understands that good security is both a technical and a business discipline. WHAT YOU'LL BE DOING: Rather than a long checklist, here's what success in this role looks like: * Own the development and maintenance of data security policies, standards, and procedures across the organisation * Drive the information security roadmap, coordinating activities across Risk and Compliance, Engineering, and Operations * Lead risk and vulnerability assessments, ensuring findings translate into prioritised remediation actions * Oversee data classification, encryption, and access control frameworks * Lead incident response planning, investigation, and remediation — including playbooks, communications, and documentation — tracking actions through to closure * Collaborate with Engineering, DevOps, Legal, and Compliance to embed security by design * Manage third-party security risk and vendor assessments, escalating material risks appropriately * Build and deliver security awareness programmes across the organisation * Maintain documentation for audits and regulatory reporting ABOUT YOU: We're more interested in how you think and work than in a perfect CV. You'll likely bring a combination of the following: ESSENTIAL * Strong knowledge of data protection laws and regulatory frameworks * Experience in cloud security environments * Deep understanding of encryption, IAM, network security, and secure architecture principles * Proven experience in incident response and risk management * Familiarity with security standards such as ISO 27001, SOC 2, NIST * Ability to translate technical risks into business impact for non-technical stakeholders * Strong communication and cross-functional collaboration skills * Certifications are a plus (e.g. Security+, ISO 27001 Foundation, CC); advanced certifications (CISSP, CISM, CCSP) welcomed but not required NICE TO HAVE * Experience in HPC, GPU, or AI/ML cloud environments * Background in SaaS, IaaS, or enterprise cloud infrastructure security * Experience with zero-trust architecture implementation * Knowledge of container and Kubernetes security * Familiarity with DevSecOps practices and CI/CD security integration * Exposure to international data transfer frameworks and multi-region compliance * Experience with SIEM, SOAR, and advanced threat detection platforms * Involvement in external security audits and penetration testing programmes * Experience leading security certifications or accreditation programmes WHAT WE OFFER: * Competitive salary and annual discretionary bonus scheme * Employee wellbeing benefits * 25 days of holiday, plus public holidays * Flexible working arrangements (remote or hybrid, depending on role and location) * Real ownership and autonomy, with the trust to take initiative and experiment * The opportunity to make a visible, meaningful impact as we scale * Clear career progression and growth opportunities in a fast-growing company * A collaborative, international culture built on trust, transparency, and ownership * The chance to help shape NexGen Cloud's team, culture, and future alongside ambitious, mission-driven colleagues MORE INFORMATION Head over to our NexGen Cloud careers page to view current openings and follow us on LinkedIn and X to learn more about our journey, newest releases and hear exciting news in the neocloud space.

Location: London, UK Weekly office requirement: Hybrid – 2 days per week Employment type: Permanent Seniority level: Mid-Senior   At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary. SOUNDS GREAT, WHAT WILL I BE DOING? 🤔 As our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI. Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business. A few things you'll be responsible for: 👉 Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves. 👉 Develop, implement, and maintain information security policies and procedures aligned with industry best practices. 👉 Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements. 👉 Build and maintain GWI's security trust portal, showcasing our credentials to clients and stakeholders using tools such as Drata or Vanta. 👉 Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture. It's also fun; shaking things up is what working for GWI is all about. You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment. WHAT DO I NEED TO BRING WITH ME? 🧳 You'll need to be able to demonstrate the core skills this role requires. You don't have to tick all the boxes right away; the important thing is that you're willing to learn. Here's what the team will be looking for in you: 👉 In-depth, practical experience obtaining and maintaining ISO 27001 certification, with solid knowledge of frameworks such as NIST — typically 3–5 years in an information security compliance role, though other experience levels will be considered. 👉 Proven ability to develop and maintain security policies and procedures that align with industry best practice. 👉 Experience conducting vendor security assessments and managing client security onboarding requirements, balancing risk against commercial objectives. 👉 Hands-on experience building or maintaining a security trust portal; familiarity with tools such as Drata or Vanta is a plus. 👉 Knowledge of SaaS and AI environments, with experience implementing and managing cloud security best practices. 👉 Strong communication skills — able to translate complex GRC topics into clear internal guidance and keep the wider business informed and engaged on security matters. Equally important is attitude. We want people who think big (to make an impact), ask why (to find a better way), and show respect (to everyone, at every level, all the time). Those are our values, and they're a big part of what we're looking for in you. WHAT WE OFFER 🧘 At GWI, you’ll find meaningful work, visible impact, and a culture that empowers you to do your best. Our package includes: * Time to recharge – 25 days’ annual leave, plus office closures over the holidays. * Health & wellbeing – Health cash plan, enhanced family benefits, carer days, and mental health support. * Financial benefits – Competitive salary, 4% pension matching, and recognition programs that celebrate success. * Flexibility & balance – Flexitime, early Friday finishes, hybrid and remote options, plus a “work from home” budget. * Career growth – Accredited learning, leadership development, and global career mobility. * Community & impact – DE&I initiatives, volunteering opportunities, donation matching, and payroll giving. Put all that together and GWI is the friendliest, most fulfilling place any of us has ever worked.   DIVERSITY, EQUITY & INCLUSION 🫶 Diversity is fundamental to who we are—both as a data company and as a workplace. Our data reflects global realities, and so must our teams. We strive to ensure our workforce is as diverse and inclusive as the insights we provide to our clients. As a Disability Confident employer, we welcome applications from disabled candidates and are committed to providing all necessary adjustments during the hiring process. We also actively encourage applications from underrepresented and marginalized communities. At GWI, you will find a place where you can contribute meaningfully, grow professionally, and belong fully.   #li-hybrid #LI-NIKOSSS1