Information Security Team Lead

About Numan Founded in 2018, we’ve already grown to be a 300+ team distributed across the globe, united by a singular mission: empowering people to take control of their health. Numan is transforming health: we’ve built a cutting-edge platform that integrates diagnostics, medication, supplements, digital programmes, and doctor consultations. Giving people the tools they need to maximise life. To deliver on our transformative mission, we are guided by our 5 company values: • Patients first. • Learn fast. • Own the quality. • Succeed together. • Care deeply. Backed by top-tier investors, Numan is already having a positive impact on hundreds of thousands of patients here in the UK, and we want you to help us deliver this mission! The Role: As our Information Security Team Lead, you will own the day-to-day running of Numna's information security function, lead our managed service provider, and build a small team as we scale. This is a hands-on leadership position where you'll set technical direction, balance risk against usability, and enable our product, clinical, and engineering teams to deliver fast, safe healthcare to our patients. What you'll be doing: Maintain an active risk register that directly influences business decisions, conduct practical risk assessments, and keep the Board and leadership candidly informed on our true security posture. Oversee ISO 27001, DSPT, and Cyber Essentials Plus. Define pragmatic, engineer-friendly policies, manage third-party/vendor risks, and establish strict AI governance frameworks for sensitive patient data. Lead security incidents end-to-end (coordination, communication, regulatory reporting, and blameless post-mortems). Improve threat detection, logging, and BC/DR plans while engineering handles technical containment. Execute our security roadmap across IAM, DLP, zero-trust, email, and endpoint security. Build a pragmatic security culture where teams seek your advice early, balancing security and usability for engineers, clinicians, and executives alike. What you'll need: Experience owning end-to-end information security in a company of a similar scale, including running an ISMS and holding ISO 27001 or Cyber Essentials Plus. Hands-on experience protecting sensitive personal data under UK GDPR (or equivalent) and navigating vendor/AI supply chain risks. A strong technical foundation across core IT security domains (IAM, DLP, endpoint, network, and SaaS) so you can constructively challenge architectural designs with engineers. Direct experience leading real security incidents, managing regulatory notifications, and conducting effective post-incident reviews. The ability to size controls to actual risk, hold a firm line on patient safety, and help the business move fast everywhere else. It's a bonus if you have: Prior experience in HealthTech, healthcare, or FinTech, and hands-on experience crafting AI governance frameworks. Our benefits include... 📈 - Share options. 🏖 - 25 days holiday, plus bank holidays (increasing to 30 the longer you stay with Numan). 🩺 - Health insurance with Vitality . 🚘 - Electric car salary sacrifice scheme with Octopus . 🧸 - Enhanced maternity and parental leave. 🥳 - A day off on your Birthday! 🐥 - Nursery benefit provided by YellowNest . 💼 - Employee assistance programme (access to therapy, financial planning and discounts). ⚖️ - Generous pension (includes both employee and employer contributions). 💻 - Flexible working options, including a dog-friendly office in Farringdon. 📚 - Personal training and development budget via Learnerbly. 👟 - Wellhub membership, giving you access to over 2,000 locations in the UK. 🚲 - Cycle to work scheme. 🚆 - Season ticket loan. % - Discount on Numan products for your friends and family. 🤲 - Paid volunteering days. 📅 - An additional 2 weeks off once you reach your 5th anniversary with Numan. Diversity at Numan At Numan, people are at the heart of who we are. We recognise and value the unique perspectives and experiences that individuals from all backgrounds bring. We promote innovation and creativity, enabling us to tackle things from various viewpoints and are committed to equal opportunities and continuously strive to create a workplace where everyone feels respected, heard, and valued. Embracing diversity isn't just our goal; it's our strength, driving us towards a more inclusive future.