AppyWay
Information Security GRC Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
AppyWay
AppyWay is the industry-leading SaaS solution decarbonising cities by empowering local authorities to digitally manage their kerbside and share kerbside data with fleets and drivers.
Our journey began with AppyParking, an app born from the frustration of finding and understanding parking on the streets of London. During the app’s creation, it was clear that cities lacked shareable, machine-readable, standardised parking restriction data. So we went ahead and built the UK’s largest set of standardised kerbside data, in turn discovering the untapped potential beneath everyone’s feet.
Today, we’re Europe’s leading intelligent kerbside platform, helping cities and drivers optimise operations and transition to net zero by uniting parking/loading maps, occupancy data, and cashless payments.
Our impressive client roster includes local authorities such as Edinburgh, Southwark, Lambeth, Haringey, Harrogate, Cambridgeshire, Cornwall, Dorset, Dublin and more recently across the pond, NYC. Additionally, our apps and API are trusted by tens of thousands of drivers and fleets including Blue Badge innovators Motability Operations.
We are proud to have the support of top investors, including, Hyundai Motor Company, Aviva Ventures, Mastercard and ESRI mapping. To date, we have raised over £20 million in funding, allowing us to continue building something big from the ground up.
If you’re passionate about tangible solutions to help decarbonise the world then AppyWay is the perfect place for you. Come and make your mark on a company you can call your own!
What you will be doing
In this role you will lead the implementation, development, and execution of a large range of security related activities, such as creation / compliance with policies and standards, monitoring, risk and threat assessments, as well as business continuity and disaster recovery, it will report to the Director of People & Operation.
You will be responsible for managing and where required, implementing;
- ISO27001
- PCI DSS
- Cyber Essentials and Cyber Essentials +
- Security Requirements in relation to our expansion into the U.S. e.g SOC 2 Type II
- General Security Infrastructure throughout the business
- Asset and Software Management
You will chair the Information Security Forum to ensure that Security initiatives are progressed within the business.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
You will ensure that the ELT are briefed and kept informed of Security risks and produce and track the Security KPI’s.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
You will lead the Security Awareness program within the business ensuring that new and existing employees have a good understanding of Information Security including but not limited to running phishing simulations.
You will support the business with AI adoption and ensure that Security and data governance guardrails are in place.
You will support the DPO with data protection to ensure initiatives are progressed.
You will lead the end to end implementation of Cyber Essentials + with a target of Q1 2027 for this certification.
Where required support the business with IT troubleshooting through the internal ticketing system.
Essential
- Over 5 years of experience in a similar position, with familiarity in ISO 27001 standards
- You will have a relevant security certifications/qualification such as CISSP or CISM.
- Strong background in Information Security with proven experience of dealing with senior and executive management stakeholders
- Extensive understanding of security policies and frameworks, including Cyber Essentials,ISO 27001,SOC 2 and regulatory requirements e.g DPA/GDPR.
- Experience with the Microsoft stack including Entra ID, Defender, Intune, and container apps
- Experience with AI tools in particular Claude Cowork and Claude Code.
- Skilled in researching and assessing emerging cybersecurity threats and implementing strategies to mitigate them
- Experience having input into disaster recovery plans as well as the creation of contingency plans in the event of a security breach
- Up-to-date knowledge of the latest trends and advancements in security and technology
Preferred
- Ability to cross train and pick up different technologies as required
- Proven experience supporting a business in its expansion into the U.S. market, including knowledge of U.S. security standards such as SOC 2 would be beneficial
- Software development environment experience would be beneficial
- Experience in a fast-growing scale-up environment, with a keen eye for identifying opportunities to streamline processes and taking proactive action
Benefits
- 💷 Enjoy a competitive salary of £60,000-£68,000 depending on your profile and experience
- 🌴 25 days’ holiday plus all UK bank holidays and accrue additional holiday for each year you work with us up to 30 days total - it’s our way of saying thank you! 🙂
- 🏠 A hybrid flexible working model: Thursdays in our Covent Garden based office, and the option to work from home the rest of the week (if that works for you), so that you don’t have to sacrifice your personal commitments
- ✈️ Want to stay a little longer at your dream destination? Have greater flexibility to ‘Work from Anywhere’ for up to a week at time
- 🤲 Experience true ownership! Everyone at AppyWay owns a piece of the pie through our share option scheme, so when AppyWay does well, so do you!
- 💰 Save and plan for the future with our enhanced company pension scheme provided by Royal London. The more you contribute, the more we’ll contribute too!
- 📈 We’ll work to protect your compensation from a rapidly changing economy by carrying out an annual Cost of Living exercise to ensure your salary stays ahead of rising prices and interest rates
- 🪦Whilst we hope you never have to use it, we offer our entire team Death in Service insurance cover
- 🧘Your wellbeing matters to us, gain access to GP consultations, nutritionists, dental advice and counselling on demand
- 🎉 Access hundreds of perks, discounts, weekly freebies, cashback offers and discounted gym memberships to help with the cost of living changes via PerkBox
- ☕ Working on site? Enjoy a freshly made coffee from our onsite barista and a cold beverage at our bar at the end of the day!
- 💻 Everyone at AppyWay has their optimum setup, we’ll let you choose your own laptop, (PC or Mac) and accessories so you can work in comfort!
- 🚀 Everyone at AppyWay has a clear growth framework and we’ll support you with the appropriate learning and development plan to achieve your goals
- 🍼 Planning for or raising a family? You can expect to benefit from our inclusive leave options, nursing rooms and a dedicated plan to ensure you are fully supported on your return. You can also benefit from savings on nursery fees through our Workplace Nursery scheme
- 🎾 We may work flexibly but we’re still a social bunch! Join one of our regular social events, group trips and activities throughout the year
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location