As Head of Information Security you will be responsible for the design and execution of technical strategy and the implementation of security and operational controls across FluentCommerce. You will work closely with operational teams to define compliance requirements and develop security vision, roadmap, and priorities. Coordinating with Software and Platform engineering teams to meet organisational standards, evaluate risk, compliance, control assurance and promote user awareness.
About You
You’re a strong communicator passionate about Cyber Security who is experienced in engaging a broad group of stakeholders, from engineering and developers to external enterprise parties. You also are experienced at influencing and driving progress in a SaaS product company encompassing globally distributed teams and dynamic agile working environments.

Key Responsibilities:

• Lead the development and design of the enterprise information security architecture, policies and encompassing security systems, people, and processes.
• Responsible for the Security strategy, roadmap and budget including developing and delivering FluentCommerce evolving information security environment.
• Own and drive the operational control compliance roadmap, including external auditor relationships and cadence.
• Identifying and evaluating new and emerging security trends, innovations and threats and providing advice on recommended actions.
• Maintain and develop current knowledge of tools and best-practices in advanced persistent threats related to forensics and incident response.
• Maintain sales related security response catalogue and own client facing security responses, including participating in client facing discussions and working with enterprise client information security teams.
• Lead security business application and infrastructure compliance reviews, risk analysis, forensics and generation of reports for internal and external audiences.

Skills, Knowledge & Expertise:

• 5+ years of relevant information security, compliance, and risk experience with a strong history of working with software engineering teams.
• Must be experienced working in a Cloud native/SaaS product and technology company - previous hands-on engineering experience is advantageous.
• Computer Science or similar degree or relevant experience/certification (CISSP, GSEC, AWS Security Specialist) with a strong technical architecture background.
• Experience in leading and managing processes for organisational information security risk assessment and governance against standards like SOC2, ISO27001 or HIPAA.
• Proven experience in problem solving and influencing business stakeholders in technology and security risk management.
• Skilled in risk management, business risk analysis, and making complex business/risk trade-off recommendations and decisions.
• Project and initiative Delivery – Proven experience influencing and driving Information Security improvements and strategy.

Job Benefits:

• Flexibility: Enjoy working from our HQ Sydney office twice a week, collaborating with the teams for success, the rest of the working week is flexible either home or office
• Culture-first: We’re big on collaboration and fostering an inclusive, fun, and dynamic work environment. Expect regular team events and celebrations.
• Personal growth: Take your career to the next level with our professional development allowances and a strong focus on internal growth.
• Equity: All employees share in our success with access to our share options scheme.
• Inclusive leave policies: Generous paid parental leave and a day off for your birthday.

About Fluent Commerce
Working with some of the world’s leading brands and retailers, we’ve created a powerful and exciting cloud-native Order Management platform designed to reinvent how businesses serve their customers’ needs efficiently and cost effectively. We’re disrupting the status quo to help our clients adapt quickly to their ever-changing needs. It’s a huge opportunity and we’re proud to be at the heart of it.
Globally headquartered in Sydney, Australia—and with teams across Europe, US and APAC—we’re growing quickly with new opportunities both nationwide and internationally. Are you ready to change the world of commerce? Then we’d love to hear from you!
At Fluent Commerce, we are committed to enabling everyone to feel included and valued. We believe our culture & competences are stronger with diverse experiences and perspectives.
That’s why Flexy is one of our core values, we embrace flexibility around hybrid working and working hours.
We are not looking for someone who checks every single box; we’re looking for lifelong learners and people who can make us better with their own experiences. We value your uniqueness so that you can be your authentic self at work.
All qualified applicants will receive consideration for employment without regard to age, ethnicity, family, gender identity, marital status, physical or mental disability, neurodivergence, sexual orientation, or any other characteristic protected by applicable laws.

• Lead the development and design of the enterprise information security architecture, policies and encompassing security systems, people, and processes.
• Responsible for the Security strategy, roadmap and budget including developing and delivering FluentCommerce evolving information security environment.
• Own and drive the operational control compliance roadmap, including external auditor relationships and cadence.
• Identifying and evaluating new and emerging security trends, innovations and threats and providing advice on recommended actions.
• Maintain and develop current knowledge of tools and best-practices in advanced persistent threats related to forensics and incident response.
• Maintain sales related security response catalogue and own client facing security responses, including participating in client facing discussions and working with enterprise client information security teams.
• Lead security business application and infrastructure compliance reviews, risk analysis, forensics and generation of reports for internal and external audiences