💰 £100k-£120k

📍 Salary based on London. Other locations may vary.

Fanvue is one of the fastest-growing creator monetisation platforms globally. We're an AI-powered, creator-first platform helping creators connect, engage, and earn directly from their audiences at scale. Following our recent Series A, Fanvue has surpassed $200m+ in annual recurring revenue, with triple-digit year-on-year growth, supporting hundreds of thousands of creators and millions of fans worldwide.

As we grow into payments infrastructure, new verticals and AI tools that work with sensitive data, security has to grow with us.

🎯 The Role

We're hiring a Head of Security to own security across Fanvue. This is a head-of role, not a CISO. Our technical foundations are in place, built and run by our technical security lead. What we need is someone who owns the decisions around them: who has access to what, which third parties we trust, and whether security gets the focus it needs. You'll set the security roadmap, direct our technical security lead's priorities, and build the team as the function grows.

You'll sit in Operations and work closely with engineering, the People team and every department head. You'll be the person who says "this matters, this needs time" and makes sure it happens.

🚀 What You'll Do

Access and governance

Decide what access each role and team should hold, agree it with department heads and keep it right over time

Build the joiner, mover and leaver process with the People team so access follows the org chart

Write our security policies and run regular access reviews across every department

Work with our technical security lead to turn access decisions into controls

Third parties and certification

Approve vendors, tools and AI apps before they touch our data, and keep a live third-party register

Run security due diligence on payment and platform partners

Lead our path to SOC 2 and ISO 27001, from gap assessment to choosing tooling

Risk and culture

Own the security risk register and report on it to the exec team

Own the response to security incidents. Engineering incidents and on-call stay with the engineering team

Run security awareness across the company, from phishing to safe credential sharing

Roadmap and team

Set the security roadmap and direct the priorities of our technical security lead

Build the security team as the function grows

📅 Your First Six Months

30 days: handover with our technical security lead and the Ops and People teams. Take over day-to-day security management of our core tools, including Google Workspace, Okta and 1Password

3 months: review access across every role and team in the business and rework it where it needs to change

6 months: the security roadmap and risk register are live and reported on to the exec team, and the function is yours

👀 Who You Are

You've owned security at head-of level, with a strong track record to show for it

Strong on governance, access management and process, and credible enough with engineers to coordinate technical work

Comfortable pushing priorities across departments until they're done

Pragmatic. You keep controls tight without slowing the business down

A clear communicator who explains risk to non-technical teams and to execs

Payments, fintech or high-risk platform experience is a strong plus

SOC 2 or ISO 27001 delivery experience is a strong plus

AI-forward, you use AI tools in your own workflow

✨ You'll Thrive Here If

You want to own security, not advise on it

You enjoy building frameworks where there are none yet

You're happy being the voice that says security needs time, and holding the line

You like working across every team, not just engineering

⚠️ You'll Struggle Here If

You want a C-suite title, or need a large team in place before you can be effective

You'd rather write infrastructure code than own policy and governance

You see controls as a reason to slow the business down

You need an established security programme in place before you can be effective

🌍 Why Join Fanvue?

Sunday Times Best Places to Work, two years running. We don't just say we have great culture, we prove it