Information Security Manager

Published: October 29, 2026.

Summary

• Bipsync is a fast-growing financial technology SaaS company with a product thoughtfully designed to optimise research management.
• Our customers include the world’s leading Allocators, Asset Managers, and Alternative Fund Managers.
• You will be joining an established Infrastructure team and will play a critical role in ensuring our company’s adherence to relevant laws and regulations.
• Bipsync has a blended office policy: combining the flexibility to work from home on a periodic basis along with collaborative in-office days at our attractive and inspirational Cardiff office.
• Up to £80,000 plus bonus incentive.
• We offer significant benefits in an exciting, friendly and flexible work environment.
• We are an equal-opportunities company that values diversity, and encourage all qualified applicants to apply. Please don’t hesitate to send in your application even if you don’t fully meet all the criteria.

About Bipsync

Bipsync turns fragmented investment knowledge into an institutional advantage. Built for the institutional investment community, our investment research platform helps teams capture, structure and leverage their institutional knowledge, connecting research with investment context so every decision can build on what came before. Bipsync brings research, meetings, due diligence and decision history together, and organises it around the managers, investments, strategies and people that give it meaning. Toro, Bipsync's native AI research assistant, then puts that knowledge to work. Since 2012, asset managers, asset owners, investment consultants and advisors have trusted Bipsync to preserve their investment thinking.

Watch our video: Who We Are & What We Do

About the role

This is the organisation's first dedicated security hire and is intended to grow into the seed of a security team over time. The role owns technical security operations and assurance, working closely with the Compliance Manager, who owns compliance programmes and external audits. It supports customer security questions and RFPs, and operates within the security direction set by the Head of Infrastructure.

Reporting line & team

The Information Security Manager owns the day-to-day review and coordination of the organisation's security operations — security incident review, vulnerability management, and client security assurance. The role combines hands-on technical work (triaging findings across the AWS estate and validating fixes) with coordination (tracking issues, driving remediation, and reporting on posture).

• Reports to the Head of Infrastructure.
• Partners with the Compliance Manager on compliance-related security work, providing technical security expertise, operational evidence and remediation updates.
• Collaborates with the Infrastructure and Engineering teams on platform security remediation, and with the external security advisory partner on specialist work.
• Drives corporate IT security improvements internally, coordinating with Thrive, Bipsync's external managed service provider, which has replaced the internal IT Manager function and implements the relevant IT changes.
• Individual contributor today, with scope to build out a dedicated security function as the organisation matures.

Responsibilities

Security operations — technical

• Review and triage security incidents across the AWS estate, coordinating response and escalating to the Head of Infrastructure where needed.
• Own vulnerability management: interpret output from security tooling and scanners, assess and prioritise findings, and validate that remediations are effective.
• Monitor security posture across the AWS platform and corporate IT environment, recommending improvements to controls, configuration, and tooling.
• Validate the effectiveness of corporate IT security changes implemented by Thrive.

Security operations — coordination

• Track security findings and remediation work to closure, driving action internally across Infrastructure, Engineering and other stakeholders, and coordinating with Thrive on corporate IT changes.
• Maintain visibility of open risks and report on security posture to the Head of Infrastructure.
• Define and track risk-based remediation priorities with the relevant teams and Thrive, escalating overdue or material risks to the Head of Infrastructure.

Client security assurance

• Support the Compliance Manager with the security content of RFPs and customer security questionnaires.
• Represent the organisation's security posture to customers and prospects on occasional security calls (limited exposure — a small number per year).

Governance & improvement

• Contribute to the ongoing improvement of security practices, standards, and tooling.
• Support ISO 27001 / SOC 2 activity with technical security expertise, operational evidence and remediation updates, working alongside the Compliance Manager, who retains ownership of compliance programmes and external audits, and the security advisory partner.

About you

You are a pragmatic, hands-on security professional who enjoys turning technical findings into practical improvements. You communicate clearly with technical and non-technical colleagues, influence action without relying on direct reports, and hold internal teams and external partners accountable for agreed remediation. You balance security risk with delivery needs, make proportionate recommendations, and know when to escalate. You are comfortable building a security function in a growing SaaS business while remaining close to the day-to-day technical work.

Requirements

• 5+ years of relevant information security experience, with demonstrated ownership of security operations and vulnerability management.
• Hands-on experience in a security operations, vulnerability management, or security engineering role, ideally in an AWS environment.
• Experience in B2B SaaS, fintech or supporting investment-management customers is beneficial.
• Security-related certifications — CISSP / CISM.
• Able to interpret output from cloud security tooling (e.g. GuardDuty, Security Hub, Inspector, or equivalent) and validate remediations.
• Experience triaging and coordinating security incidents.
• Comfortable supporting customer security assurance — questionnaires, RFPs, and occasional client-facing security calls.
• Exposure to ISO 27001 and/or SOC 2 from an operational / evidence standpoint.
• Self-starting and comfortable being the first dedicated security hire, with the ambition to grow the function.

Benefits

• Competitive salary and discretionary bonus opportunity.
• Comprehensive private healthcare, health cash plan and life assurance.
• Unlimited annual leave plus bank holidays.
• Enhanced parental leave and family-friendly benefits, including generous maternity and paternity leave.
• Flexible blended working and genuine work-life balance, with a modern office in sbarc | spark, Cardiff's vibrant innovation hub.
• Enhanced pension contributions with employer matching and salary sacrifice options.
• Training, mentoring and clear career progression opportunities.
• Monthly wellbeing allowance and access to a flexible benefits platform.
• Mental health, wellbeing and legal support services.
• Cycle to Work scheme.
• Home office budget and new-hire equipment package.
• Regular team lunches, social events and celebrations.

Diversity and Inclusion

Bipsync is proud to be an equal opportunities employer. Our inclusive culture empowers all of us to collaborate, belong, learn and grow. We recruit and reward based on capability and performance and encourage applications from all backgrounds and communities. We’re committed to having a team that is made up of diverse skills, experiences and abilities and we value the positive impact that difference has on our teams. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.