At a Glance
- Tasks: Lead security and compliance efforts to build trust and reliability in our platform.
- Company: Join Masabi, a pioneer in fare payment technology with a mission to simplify public transport.
- Benefits: Enjoy 25 days holiday, private healthcare, training allowance, and flexible remote work options.
- Other info: Be part of a diverse team that values innovation and personal growth.
- Why this job: Make a real impact on global transport solutions while shaping security practices.
- Qualifications: Experience in security and compliance within fintech or regulated environments is essential.
The predicted salary is between 70000 - 90000 £ per year.
About Us: At Masabi, we’re driving the fare payment revolution, powering the journeys of millions all over the world. We build fare collection platforms that allow riders to seamlessly buy and present tickets for public transport either on their mobile phones, from a ticket machine, or even by tapping their bank card to travel. Our Justride platform is used in over 250 locations globally, including some of the largest cities in the world.
The Role: At Masabi, we’re building technology that makes public transport simpler, fairer and more accessible for millions of people. That only works if our platform is secure, trusted and reliable. As our Head of Security & Compliance, you’ll step into a role that is central to how we build trust with our customers and scale as a global SaaS business. You’ll own security and compliance end to end, shaping how we approach it as a company and how it works in practice day to day.
Responsibilities:
- Take ownership of security and compliance across Masabi, creating clarity on priorities and ways of working.
- Build a clear view of our current security posture and define a practical path to strengthen it over time.
- Define security and compliance requirements and work closely with Engineering and IT teams to ensure they are implemented effectively.
- Maintain existing compliance across PCI DSS, ISO27001, SOC2 and Cyber Essentials, and lead new compliance initiatives across additional standards such as ISO 27017 and ISO 27018.
- Manage audits end to end, from preparation through to delivery and follow-up actions.
- Work closely with Engineering and Product teams to embed security practices in a way that supports delivery.
- Maintain a clear and actionable view of risk, helping the business prioritise what matters most.
- Build a more scalable approach to customer assurance, including clearer processes and reusable materials for customer and audit requests.
- Help guide decisions on which compliance standards we take on as we grow.
- Lead and support a small team, creating focus, trust and shared direction.
About You: You’ve worked in security and compliance within a payments, fintech or PCI-regulated environment. You have strong, hands-on experience with PCI DSS, ISO27001 and SOC2, including preparing for and delivering audits. You’ve personally owned and delivered compliance programmes, not just overseen them. You understand how security and compliance connect, and how to make them work in practice across a business. You’ve operated in a growing or scaling company, where you’ve had to bring structure and prioritise effectively. You’re comfortable driving work across teams without direct authority, and following through to completion. You bring sound judgement when balancing risk, delivery and commercial needs. You’ve supported or led a small team and know how to create clarity and accountability. You communicate clearly with both technical and non-technical audiences, helping people understand what matters and what action is needed.
Nice To Have: Experience working with additional ISO standards such as ISO 27017 and ISO 27018. Experience scaling security and compliance in a growing SaaS company, especially through periods of increased customer or regulatory demand. Relevant certifications such as CISSP, CISM, CISA or ISO27001 Lead Auditor or similar. Awareness of AI-related security and governance considerations, and how they may apply in a SaaS environment.
Some of Our Benefits: 25 days of holiday per year plus the option to buy another 5 days pro-rated. Private Healthcare via AXA, including pre-existing conditions and mental health. Life Insurance. Menopause support. Choice of workstation. Ability to work for up to 3 months per year from any country in the world (certain limitations). Pension scheme. Training allowance of up to £1000 per year. £200 annual allowance for any home office need or improvement. Enhanced family leave pay. Cycle to work scheme. Regular social gatherings with a monthly allowance for each employee. Fun and collaborative environment with a focus on making a difference in the world.
Careers at Masabi are for people going places - driven by a mission to make transit fair and accessible for all. We are a network of innovators from all walks of life, passionate about making a difference. At Masabi, we operate with openness and trust, creating an environment where everyone feels empowered to bring their whole, authentic selves to work. Whoever you are, just be yourself. We welcome applications from underrepresented groups, including disabled and neurodivergent people, and can make adjustments at any stage of the process. You’re also welcome to share your pronouns whenever you feel comfortable. Together, we simplify journeys, remove barriers, and improve daily life for millions.
Why Join Masabi? Driven by Purpose – We believe in journeys made simple. The work isn’t always easy, but the best things never are. Encouraged to Accelerate – Masabi is going places and our people are in the driving seat. Whether you’re taking the direct route or exploring new paths, we support your journey. Advancing with Empathy – We put people first and foster a culture of learning, not blame. No matter your cargo, we share the load.
Head of Security & Compliance in London employer: Masabi
At Masabi, we pride ourselves on being an exceptional employer, offering a vibrant work culture that champions innovation and collaboration. With a strong focus on employee growth, we provide extensive benefits including private healthcare, a generous holiday allowance, and the flexibility to work remotely or from anywhere in the world for part of the year. Join us in our mission to make public transport fairer and more accessible, while enjoying a supportive environment that values your unique contributions.
StudySmarter Expert Advice🤫
We think this is how you could land Head of Security & Compliance in London
✨Tip Number 1
Network like a pro! Reach out to people in the industry, attend events, and connect with current employees at Masabi. A friendly chat can open doors that a CV just can't.
✨Tip Number 2
Prepare for interviews by understanding Masabi's mission and values. Show us how your experience aligns with our goals in security and compliance. We love candidates who are genuinely excited about what we do!
✨Tip Number 3
Practice your responses to common interview questions, especially around security frameworks like PCI DSS and ISO27001. We want to see your hands-on experience shine through!
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re serious about joining our team at Masabi.
We think you need these skills to ace Head of Security & Compliance in London
Some tips for your application 🫡
Be Authentic:When you're writing your application, let your true self shine through. We want to know who you are beyond your qualifications, so don’t be afraid to share your unique experiences and perspectives.
Tailor Your Application:Make sure to customise your application for the Head of Security & Compliance role. Highlight your relevant experience with security standards like PCI DSS and ISO27001, and show us how you can bring value to our team.
Showcase Your Achievements:Don’t just list your responsibilities; tell us about your accomplishments! Use specific examples to demonstrate how you've successfully managed compliance programmes or led audits in the past.
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for this exciting opportunity at Masabi!
How to prepare for a job interview at Masabi
✨Know Your Stuff
Make sure you brush up on your knowledge of security and compliance standards like PCI DSS, ISO27001, and SOC2. Be ready to discuss how you've implemented these in past roles, as well as any challenges you've faced and how you overcame them.
✨Show Your Leadership Skills
As the Head of Security & Compliance, you'll be leading a small team. Prepare examples of how you've successfully managed teams before, focusing on how you created clarity and accountability. Highlight your ability to drive work across teams without direct authority.
✨Understand the Business
Familiarise yourself with Masabi's mission and how security and compliance play a role in their fare payment revolution. Be ready to discuss how you can help strengthen their security posture while supporting their growth as a global SaaS business.
✨Communicate Clearly
You'll need to communicate with both technical and non-technical audiences. Practice explaining complex security concepts in simple terms, and think about how you can help others understand what actions are needed to maintain compliance and security.
