Director of IT & Information Security

Director of IT & Information Security

The Director of IT & Information Security is responsible for protecting Thesis SM’s technology assets, data, and infrastructure while enabling seamless IT operations for a globally distributed workforce. This leader will execute the company’s IT and security strategy, ensuring compliance with regulatory frameworks, managing risk, and building a resilient and secure technology environment. The ideal candidate brings strong expertise in enterprise IT, cybersecurity, and compliance, combined with leadership and cross-functional collaboration skills.

Key Responsibilities

• Lead and execute Thesis SM’s IT and information security strategy, policies, and roadmap.
• Lead all aspects of IT operations, including infrastructure, end-user computing, and IT service management.
• Build and manage a comprehensive information security programme, including threat detection, incident response, and vulnerability management.
• Implement and enforce Thesis's AI security and acceptable use policies, governing shadow AI risk, data classification in AI workflows, and third-party AI vendor assessment.
• Evaluate AI-augmented threat detection and AIOps capabilities to improve security monitoring efficiency and IT operational reliability.
• Report on AI risk posture to senior leadership and ensure compliance with GDPR, ISO 27001, SOC 2, and emerging AI regulation across Thesis's operating jurisdictions.
• Ensure compliance with applicable security and data privacy regulations, including GDPR, ISO 27001, and SOC 2.
• Conduct and oversee regular security risk assessments, audits, and penetration testing.
• Collaborate with Engineering and Product teams to embed security best practices (DevSecOps) into the SDLC.
• Lead security awareness and training programmes across the organisation.
• Manage vendor relationships for security tools, IT services, and managed security providers.