How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Join beqom — where tech meets impact
beqom is a high-growth B2B SaaS company that provides industry-leading tools for pay equity and transparency, compensation, and performance management.
Trusted by some of the world’s most respected companies, beqom enables HR and business leaders to navigate global compliance and make smarter pay decisions that attract, retain, and motivate top talent.
Founded in Switzerland and serving clients worldwide, our powerful, enterprise-ready products are fuelled by beqom pay intelligence.
Role Overview
We are looking for an experienced Head of Cybersecurity to own and mature the security function within a fast-growing SaaS organisation of approximately 250 employees. This is a senior leadership role responsible for defining and executing beqom’s cybersecurity strategy — ensuring robust protection of customer data, maintaining compliance with ISO 27001, SOC 2, and other regulatory frameworks, and enabling secure business growth.
You will be beqom’s senior security authority, balancing hands-on leadership with strategic direction, and working closely with Engineering, DevOps, Product, Legal, and Compliance teams. You will also represent beqom externally — participating in customer security reviews, audits, and prospect due diligence.
What you'll be doing
Strategy & Leadership
- Define and own the overall cybersecurity strategy and roadmap for the business.
- Establish a security-first culture across engineering and business teams.
- Act as the primary security authority and advisor to senior leadership.
- Report on security risks and posture to executive leadership and the board.
- Build and develop a small but high-performing security team.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Compliance & Risk
- Own and maintain ISO 27001 and SOC 2 compliance programmes.
- Develop and maintain security policies, standards, and procedures.
- Maintain the enterprise risk register and ensure mitigation strategies are in place.
- Partner with Legal, Compliance, and Product teams on data protection and privacy obligations.
Technical Security
- Oversee cloud security across AWS and Azure environments and SaaS application security.
- Implement and improve security monitoring, detection, and response capabilities.
- Manage vulnerability management, penetration testing, and remediation processes.
- Own incident response planning and execution for security events.
- Define secure architecture principles for cloud-native SaaS platforms.
- Ensure security is embedded in CI/CD pipelines and the software development lifecycle.
- Progress identity, access management, and zero-trust architecture adoption.
- Collaborate with DevOps and Engineering to embed DevSecOps practices.
Customer & Commercial
- Act as beqom’s security representative in customer and prospect engagements.
- Participate in customer security reviews, audits, and due diligence calls.
- Respond to security questionnaires from clients and prospects.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Skills & Experience
What you'll bring
- Proven, senior-level experience in Information Security, with a track record of building and maturing security functions in a SaaS or cloud-native environment.
- Demonstrated experience designing, implementing, and managing a modern Information Security Management System (ISMS).
- Deep practical knowledge of ISO 27001, SOC 2, NIST CSF, or similar frameworks.
- Strong understanding of cloud security principles and best practices, ideally across AWS and Azure.
- Excellent written and verbal communication skills — able to articulate complex security concepts clearly to technical teams, C-level executives, and external clients.
- Relevant security certifications such as CISSP, CISM, CRISC, or CISA.
- Familiarity with GDPR and its operational requirements.
Bonus points if you have
- Experience in a customer-facing security role within enterprise SaaS.
- Hands-on experience with DevSecOps tooling and secure SDLC implementation.
- Experience with zero-trust architecture and modern IAM frameworks.
Why join us?
- Your career, your design. Unleash your ambition in our dynamic, autonomous environment.
- Drive meaningful change. Build a fairer future for every employee by joining a market leader that is improving the world of work.
- Belong to something bigger. Collaborate with a passionate, diverse and talented team around the globe.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills