ben - Security Lead

London, Greater London, United Kingdom£100/hour+ Equity2mo ago

In Office Staff EMEA Cloud Computing Software Security Management Specialist Prospecting AWS Governance Due Diligence

Requirements

• Hands-on security experience in a SaaS, cloud-first, or product-led environment - you've probably been doing this for 4-6 years and are looking to own a security function for the first time • Strong working knowledge of identity and access management in both corporate and product contexts. We work with Microsoft's security ecosystem a lot (Entra, Intune, Defender) - you'll need to be comfortable there or confident you can get up to speed quickly • Experience securing AWS environments and embedding security into product development, through threat modelling, code review, and CI/CD controls • Experience with endpoint and corporate security - you've worked with EDR, MDM, ZTNA, or similar tooling, even if not the specific stack we use • Familiarity with compliance frameworks (ISO 27001 or SOC 2), and the ability to translate technical controls into audit-ready evidence • Confidence in enterprise customer conversations - you can explain security clearly to technical and non-technical audiences • Comfort with ambiguity and context-switching - you're happy owning the answer across a wide remit rather than specialising in one domain

Responsibilities

• Act as Ben’s security lead in enterprise customer and prospect conversations, questionnaires, due diligence calls, and trust centre content. Security is a reason customers choose Ben - you'll help keep it that way • Own and improve Ben’s security controls across identity, endpoint, cloud infrastructure, product security, and corporate IT • Lead monitoring, detection, incident response, and continuous improvement across the environment • Maintain and mature our ISO 27001-certified ISMS, conducting risk assessments, vendor reviews, and policy/control maintenance to keep our control environment effective and audit-ready • Embed secure-by-design into the development lifecycle - threat modelling, architecture reviews, secure code review, and CI/CD hardening • Over time, lead a pragmatic SOC 2 implementation alongside the existing ISMS, and provide input on GenAI governance as Ben ships AI features in production

Benefits

• You'll own the security function. Priorities, architecture, tooling, controls, and how it's communicated to customers. That level of ownership at a company with real enterprise customers and a live compliance programme is rare without ten years of politics to get there. • Security at Ben is an enabling function, and directly tied to revenue. Enterprise customers choose us partly because of how we handle their data, and you'll be the person in those conversations. You'll have a direct line to the CTO and genuine influence over product and infrastructure decisions. • The foundation is already built - ISO 27001:2022 certified, established AWS controls and a functioning ISMS. You're not here to put out fires but to take something that works and make it stronger as the company grows into more demanding customers and regulated environments. • It’s important to us to practise what we preach when it comes to our benefits. We know what good looks like and we want to provide the best for our team, with a comprehensive and inclusive benefits package. This means you have a choice over the things that are most important to you. You can see a selection below, along with the full offering here https://www.thanksben.com/benefits-at-ben. • 💰 Competitive base salary + equity, so you own what you build • 💳 £100 monthly personal Ben Balance: for whatever works for you, whether that's Netflix, Spotify, or a really expensive cup of coffee! This allowance will increase by £50 for each year of service until you reach £250 • 🍔 Weekly lunch provided in office so you can spend quality time with the team over some tasty food! • 🏖 28 days of holidays a year plus bank holidays, and an option to buy or sell 2 days per year. Also, your annual holiday entitlement will increase to 30 days after your 3rd year of service! • 🎈 Day off for your birthday • 🌴 Work-from-abroad scheme, so you can support your travels, enjoy an extended holiday, or visit loved ones. • 🍼 Enhanced parental leave and workplace nursery scheme to support with the cost of childcare in a nursery setting • ❤️ Comprehensive Private Medical Insurance • 💌 Funded Life Assurance cover with the option to voluntarily increase - this also includes an annual health check • 🧠 Comprehensive and tailored mental health support and professional coaching through a leading provider • DIVERSITY AND CULTURE AT BEN • We are organically growing a brilliantly diverse, inclusive and respectful bunch of people we are extremely proud of. This should go without saying but all applications are very much welcome. If you need any adjustments to support you with your application, just let us know by emailing [email protected]. You can learn more about DEI at Ben here https://www.notion.so/thanksben/Diversity-Equity-Inclusion-618031028b0f47c5be374a5b249f63c2?source=copy_link.