IT Security & Infrastructure Manager in London

Description

Appy Way is the industry-leading Saa S solution decarbonising cities by empowering local authorities to digitally manage their kerbside and share kerbside data with fleets and drivers

Our journey began with Appy Parking, an app born from the frustration of finding and understanding parking on the streets of London.

During the app’s creation, it was clear that cities lacked shareable, machine-readable, standardised parking restriction data.

So we went ahead and built the UK’s largest set of standardised kerbside data, in turn discovering the untapped potential beneath everyone’s feet.

Today, we’re Europe’s leading intelligent kerbside platform, helping cities and drivers optimise operations and transition to net zero by uniting parking/loading maps, occupancy data, and cashless payments.

Our impressive client roster includes local authorities such as Edinburgh, Southwark, Lambeth, Haringey, Harrogate, Cambridgeshire, Cornwall, Dorset, Dublin and more recently across the pond, NYC.

Additionally, our apps and API are trusted by tens of thousands of drivers and fleets including Blue Badge innovators Motability Operations.

We are proud to have the support of top investors, including, Hyundai Motor Company, Aviva Ventures, Mastercard and ESRI mapping.

To date, we have raised over £20 million in funding, allowing us to continue building something big from the ground up.

If you’re passionate about tangible solutions to help decarbonise the world then Appy Way is the perfect place for you. Come and make your mark on a company you can call your own!

Requirements

• What you will be doing
• In this role you will lead the implementation, development, and execution of a large range of security related activities, such as creation / compliance with policies and standards, monitoring, risk and threat assessments, as well as business continuity and disaster recovery, it will report to the Director of People & Operation
• You be be responsible for managing and where required, implementing;
• PCI DSS
• Cyber Essentials and Cyber Essentials +
• Security Requirements in relation to our expansion into the U. S. e. g
• SOC 2 Type II
• General Security Infrastructure throughout the business
• Asset and Software Management
• You will chair the Information Security Forum to ensure that Security initiatives are progressed within the business.
• You will ensure that the ELT are briefed and kept informed of Security risks and produce and track the Security KPI’s.
• You will lead the Security Awareness program within the business ensuring that new and existing employees have a good understanding of Information Security including but not limited to running phishing simulations.
• You will support the business with AI adoption and ensure that Security and data governance guardrails are in place.
• You will support the DPO with data protection to ensure initiatives are progressed.
• You will lead the end to end implementation of Cyber Essentials + with a target of Q1 2027 for this certification.
• Where required support the business with IT troubleshooting through the internal ticketing system.
• Someone with a secure-by-design, shift-left approach to Security Architecture and Assurance. You'll need to be incredibly well-versed in processes and methodologies tied to this
• Proficiency within the Software Security, Application Security and Dev Sec Ops ecosystem
• Strong experience with modern cloud environments, preferably Azure

Essential

• Over 5 years of experience in a similar position, with familiarity in ISO 27001 standards
• You will have a relevant security certifications/qualification such as CISSP or CISM.
• Strong background in Information Security with proven experience of dealing with senior and executive management stakeholders
• Extensive understanding of security policies and frameworks, including Cyber Essentials, ISO 27001, SOC 2 and regulatory requirements e. g DPA/GDPR.
• Experience with the Microsoft stack including Entra ID, Defender, Intune, and container apps
• Experience with AI tools in particular Claude Cowork and Claude Code.
• Skilled in researching and assessing emerging cybersecurity threats and implementing strategies to mitigate them
• Experience having input into disaster recovery plans as well as the creation of contingency plans in the event of a security breach
• Up-to-date knowledge of the latest trends and advancements in security and technology
• Preferred
• Ability to cross train and pick up different technologies as required
• Proven experience supporting a business in its expansion into the U. S. market, including knowledge of U. S. security standards such as SOC 2 would be beneficial
• Software development environment experience would be beneficial
• Experience in a fast-growing scale-up environment, with a keen eye for identifying opportunities to streamline processes and taking proactive action

Benefits

• 💷 Enjoy a competitive salary of £60,000-£68,000 depending on your profile and experience
• 🌴 25 days’ holiday plus all UK bank holidays and accrue additional holiday for each year you work with us up to 30 days total - it’s our way of saying thank you! 🙂
• 🏠 A hybrid flexible working model: Thursdays in our Covent Garden based office, and the option to work from home the rest of the week (if you that works for you), so that you don’t have to sacrifice your personal commitments
• ✈️ Want to stay a little longer at your dream destination? Have greater flexibility to ‘Work from Anywhere’ for up to a week at time
• 🤲 Experience true ownership! Everyone at Appy Way owns a piece of the pie through our share option scheme, so when Appy Way does well, so do you!
• 💰 Save and plan for the future with our enhanced company pension scheme provided by Royal London. The more you contribute, the more we’ll contribute too!
• 📈 We’ll work to protect your compensation from a rapidly changing economy by carrying out an annual Cost of Living exercise to ensure your salary stays ahead of rising prices and interest rates
• 🪦Whilst we hope you never have to use it, we offer our entire team Death in Service insurance cover
• 🧘Your wellbeing matters to us, gain access to GP consultations, nutritionists, dental advice and counselling on demand
• 🎉 Access hundreds of perks, discounts, weekly freebies, cashback offers and discounted gym memberships to help with the cost of living changes via Perk Box
• ☕ Working on site? Enjoy a freshly made coffee from our onsite barista and a cold beverage at our bar at the end of the day!
• 💻 Everyone at Appy Way has their optimum setup, we’ll let you choose your own laptop, (PC or Mac) and accessories so you can work in comfort!
• 🚀 Everyone at Appy Way has a clear growth framework and we’ll support you with the appropriate learning and development plan to achieve your goals

• 🍼 Planning for or raising a family?

You can expect to benefit from our inclusive leave options, nursing rooms and a dedicated plan to ensure you are fully supported on your return.

• You can also benefit from savings on nursery fees through our Workplace Nursery scheme
• 🎾 We may work flexibly but we’re still a social bunch! Join one of our regular social events, group trips and activities throughout the year

⚠️ A polite note to recruitment agencies: Our internal team handles 100% of our Talent Acquisition initiatives in-house.

We appreciate your interest, but external recruiters and agencies should not get in touch regarding this vacancy.

Thank you!