At a Glance
- Tasks: Lead and build Omaze's security strategy from the ground up.
- Company: Omaze, a growing company making a social impact through luxury prizes.
- Benefits: Generous stock options, private medical insurance, and a personal development budget.
- Other info: Join a diverse team committed to innovation and authentic self-expression.
- Why this job: Shape security at a pivotal growth moment and make a real difference.
- Qualifications: Senior security leadership experience and expertise in building security programmes.
The predicted salary is between 80000 - 100000 € per year.
Who We Are: At Omaze, we give our community in the UK and Germany the chance to win luxury homes and other life-changing prizes — all while raising money for the causes they love. Thanks to our Omaze Community, we’ve raised over £100 million for UK charities in just five years. That’s millions helping organisations like Age UK, the RSPCA, British Heart Foundation and Great Ormond Street Hospital Charity deliver life-saving work. And the best part? We’re only just getting started. Omaze is building a business and culture committed to growth and creating significant social impact on a global scale.
About The Job: We’re looking for a Head of Security to take ownership of Omaze’s end-to-end security posture at a pivotal moment in our growth. As we scale, expand into new territories, and mature our operational foundations, security is moving from a shared responsibility to a critical, business-wide priority. Right now, it sits across Engineering and IT — but we need a dedicated leader to bring it together into a clear, structured, and scalable programme. This is a rare opportunity to build a security function from the ground up. You’ll define our strategy, implement the right controls, and establish the frameworks we need to support our next stage — from ISO 27001 certification to investor scrutiny. You’ll be just as comfortable operating at board level as you are rolling up your sleeves to get things done. At Omaze, everyone is hands-on — including our exec team — and this role is no exception.
What You’ll Be Doing:
- Owning Omaze’s security posture end-to-end across AWS, SaaS platforms, and employee devices
- Building and delivering a company-wide security strategy aligned to our growth, IPO readiness, and regulatory landscape
- Leading our ISO 27001 certification journey, including gap analysis, roadmap creation, and delivery
- Establishing and embedding a robust Information Security Management System (ISMS)
- Designing and implementing a formal GDPR and data protection programme
- Defining and owning our incident response plan — and leading response during security events
- Working with IT in MDM processes and strengthening endpoint security across the business
- Conducting security reviews across our infrastructure and tooling (AWS, Google Workspace, Slack, Shopify, Stripe, etc.)
- Owning relationships with external partners (e.g. auditors, pen testers, security vendors)
- Bringing clarity and visibility to risk through regular board-level reporting
- Building a strong security culture through awareness, education, and practical guidance
- Laying the foundations for a future security team
About You: You’ve operated in a senior security leadership role (Head of, Director, or similar), ideally in a high-growth or scaling tech environment. You’re experienced in building security programmes from scratch — not just maintaining them. You’ve successfully led or been deeply involved in ISO 27001 certification. You’re comfortable balancing strategic thinking with hands-on execution. You understand the realities of GDPR and data protection in a consumer-focused business. You’ve worked in environments preparing for major milestones like IPO, enterprise expansion, or regulatory scrutiny. You can confidently communicate with senior stakeholders, including execs, investors, and auditors. You’re pragmatic — you know how to prioritise and deliver impact without overcomplicating things. You’re naturally collaborative and can influence across Engineering, Product, Legal, and beyond. You care about building something meaningful and want to have a real impact on how we scale.
What’s In It For You: Generous stock options scheme, 25 days annual leave PLUS Bank Holidays, private medical and dental insurance, 9% employer pension contributions, when you contribute at least 2%, a generous personal learning and development budget each year to use on training courses, conferences and professional memberships, personal equipment budget to work from home, enhanced family leave policies, life assurance of 4x your salary.
DEI Statement: We actively seek out diversity of thought and experience to drive innovation. We welcome all backgrounds, identities, and perspectives and work hard to ensure that every Omaze employee can bring their authentic self to work at all times.
Head of IT Security in London employer: Omaze
Omaze is an exceptional employer that fosters a culture of growth and social impact, making it an ideal place for the Head of IT Security role. With generous benefits such as stock options, extensive leave, and a commitment to employee development, you will have the opportunity to build a security function from the ground up while working alongside a hands-on executive team in a collaborative environment. Join us in making a meaningful difference as we continue to expand our reach and support vital charities across the UK and Germany.
StudySmarter Expert Advice🤫
We think this is how you could land Head of IT Security in London
✨Tip Number 1
Network like a pro! Reach out to your connections in the industry, attend relevant events, and engage with professionals on platforms like LinkedIn. We can’t stress enough how important it is to make those personal connections that could lead to job opportunities.
✨Tip Number 2
Prepare for interviews by researching the company inside out. Understand their mission, values, and recent news. At StudySmarter, we believe that showing genuine interest in the company can set you apart from other candidates.
✨Tip Number 3
Practice your pitch! Be ready to explain how your skills and experiences align with the role of Head of IT Security. We recommend rehearsing with a friend or using mock interviews to boost your confidence.
✨Tip Number 4
Don’t forget to follow up after interviews! A simple thank-you email can go a long way in leaving a positive impression. And remember, apply through our website for the best chance at landing that dream job!
We think you need these skills to ace Head of IT Security in London
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the Head of IT Security role. Highlight your experience in building security programmes and leading ISO 27001 certification. We want to see how your skills align with our mission at Omaze!
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Share your passion for security and how you can contribute to our growth. Don’t forget to mention your hands-on approach and experience in high-growth environments — we love that!
Showcase Your Leadership Skills:In your application, emphasise your leadership experience and ability to communicate with senior stakeholders. We’re looking for someone who can operate at board level while also getting stuck in — so let us know how you balance both!
Apply Through Our Website:We encourage you to apply through our website for the best chance of being noticed. It’s the easiest way for us to keep track of your application and ensure it gets the attention it deserves. Good luck!
How to prepare for a job interview at Omaze
✨Know Your Security Fundamentals
Make sure you brush up on the key principles of IT security, especially around ISO 27001 and GDPR. Be ready to discuss how you've implemented these in previous roles, as this will show your depth of knowledge and hands-on experience.
✨Showcase Your Leadership Skills
Since this role is about building a security function from scratch, be prepared to share examples of how you've led teams or projects in the past. Highlight your ability to balance strategic thinking with practical execution, as this is crucial for the Head of IT Security position.
✨Understand the Business Impact
Omaze is focused on growth and social impact, so demonstrate how security can align with business objectives. Discuss how you've previously contributed to a company's growth while ensuring robust security measures were in place.
✨Prepare for Board-Level Discussions
You’ll need to communicate effectively with senior stakeholders, so practice articulating complex security concepts in simple terms. Think about how you would present risk assessments or incident responses to a board, as this will be key in your role.
