{"id":4280611,"url":"https://alion.io/job/tillo-head-of-security","title":"Head of Security","company":{"id":52227,"name":"Tillo","domain":"tillo.com","url":"https://alion.io/company/tillo","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cape Town, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cloudflare","optional":false},{"name":"Crowdstrike","optional":false},{"name":"ISO 27001","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SIEM","optional":false},{"name":"GDPR","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-13T14:09:04Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-14T02:14:56Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Who we’re looking for: An experienced security leader who is as comfortable reviewing pen test results and SIEM output as briefing the board. You’ll have led the response to a major cyber incident and built security in a scaling, data-sensitive business, ideally in fintech or payments, and you can turn complex risks into clear, practical priorities.\n\nThe challenge: Tillo is growing as a group, and our security needs to keep up. You’ll set and lead a group-wide security strategy, raising standards across our platforms, our cloud and our acquired businesses, and you’ll lead the response if a serious security incident happens \n\nWhere you’ll work: This role will be based in Cape Town office 3 days per week, you’ll be part of our global team, collaborating with colleagues and serving customers across the UK, USA, Australia, South Africa, Italy and beyond.\n\nThe Tillo Difference\nWe're in the business of rewards and incentives, so we know a thing or two about the importance of giving back. We can't grow as a business without growing as individuals, so we are committed to providing a workplace where passionate, driven individuals can thrive. We value collaboration, trust, positivity, and a willingness to learn - only by working as a team will we reach our goals.\nWe’re the market leader in the UK and are active in a number of other markets including USA, Europe, Australia and India.\nKey responsibilities\nSecurity Strategy & Risk Management\nDevelop and implement a group-wide information security strategy and roadmap.\n\nAssess current vulnerabilities, prioritise risks and establish clear ownership of remediation.\n\nOwn the security risk framework and risk appetite, and be accountable for the risk register (maintained by the Information Security Manager), reporting framework and control environment.\n\nEmbed security by design across software development, infrastructure, cloud services and business Systems. Working with Engineering, define and roll out proportionate security gates across the group’s development lifecycle: threat modelling for significant changes at design stage, automated code, dependency and secrets scanning in CI.\n\nEstablish proportionate security policies, standards and controls without creating unnecessary bureaucracy.\n\nSecurity Incident Response, Business Continuity and Recovery\nAct as incident lead for significant security incidents, directing investigation, containment, remediation and recovery.\n\nEnsure root-cause analysis is completed and lessons learned are translated into practical security improvements.\n\nOwn the incident response plan, escalation protocols and crisis management procedures. Technical response is led by the Security Engineer; the incident log, root-cause analysis and corrective actions are tracked by the Information Security Manager.\n\nOwn business continuity and disaster recovery plans for critical services, including regular testing against agreed recovery time and recovery point objectives.\n\nCoordinate with internal technology teams, external incident response specialists, forensic investigators, legal advisers and relevant stakeholders.\n\nEnsure appropriate evidence preservation, incident documentation and timely escalation of material risks.\n\nWork with legal and privacy specialists to assess notification obligations to regulators, customers and other affected parties.\n\nTechnical Security and Infrastructure\nOwn identity and privileged access risk, working with the IT Manager, whose team operates the identity platforms, to improve privileged access, authentication and access reviews.\n\nStrengthen cloud, network, endpoint, application and infrastructure security.\n\nImprove vulnerability management, patching, penetration testing and security monitoring.\n\nEvaluate and implement appropriate detection, logging, alerting and response capabilities.\n\nOversee supplier security risk, with assessments carried out by the Information Security Manager, and review integrations, APIs and other potential attack surfaces.\n\nWork with engineering and IT teams to improve secure development practices and operational resilience.\n\nOwn the security of the group’s customer facing platforms against abuse, including bot activity, scraping, credential stuffing and API misuse. Set and maintain controls such as WAF rules, rate limiting and bot management, and work with Product and Platform, who own fraud rules and fraud losses, through an agreed handoff for detection, escalation and response.\n\nOwn the security standards for customer and partner access to group platforms, working with Engineering, who build and run them. This includes API key and token issuing, rotation and revocation, IP allowlisting for API buyers, and role based access and permissions in customer facing tools such as the Management Hub.\n\nGovernance, risk and compliance\nBe accountable for the group ISMS and relevant security frameworks, such as ISO 27001, NIS2 and Cyber Essentials Plus, and applicable payment security requirements, including extending certification scope to acquired businesses.\n\nOversee customer security assessments, due diligence, audits and contractual security commitments, providing senior sign-off and escalation.\n\nOversee the security awareness programme across the group.\n\nWork closely with Legal, Risk/Compliance, Engineering, IT and commercial teams.\n\nEnsure data protection and privacy requirements are addressed in partnership with relevant specialists.\n\nStrategy and leadership\nSet and maintain the information security strategy and roadmap, aligned to business goals and risk appetite.\n\nLead and develop the security team, hire to build out capability, and manage the security budget.\n\nOwn the group's security vendor relationships, such as CrowdStrike and Cloudflare, and managed detection and response, penetration testing and incident response partners. This includes evaluating and selecting new vendors, commercial negotiation and renewals, and holding vendors to agreed service levels.\n\nOwn security reporting on posture, risks and incidents to the executive team, Cyber Committee and board.\n\nWhat we are looking for\nEssential\nSignificant experience in information security, cybersecurity or security engineering, ideally in a senior Security Lead, Head of Security or equivalent role.\n\nProven experience leading or coordinating the response to a major security breach or cyber incident, including containment, recovery, investigation and remediation.\n\nStrong technical understanding of modern cloud-based technology environments, SaaS platforms, APIs, identity management and enterprise infrastructure.\n\nExperience building or materially improving security controls in a scaling technology, fintech, payments or other data-sensitive business.\n\nAbility to assess complex technical risks and translate them into clear business priorities.\n\nExperience working with executive teams and communicating security risks confidently to non-technical stakeholders.\n\nDemonstrable experience implementing security monitoring, incident response, vulnerability management and disaster recovery capabilities.\n\nHands on application and API security experience, such as secure code review, threat modelling and the OWASP Top 10 and API Security Top 10, with the credibility to challenge engineering teams on design and code\n\nA pragmatic, hands-on approach, with the credibility to challenge technical teams and drive urgent change.\n\nDesirable\nExperience in fintech, payments, financial services or other environments with high customer and data security requirements.\n\nExperience across multiple businesses, acquired companies or complex technology environments.\n\nKnowledge of ISO 27001, SOC 2, NIS2, PCI DSS where applicable, GDPR and relevant regulatory expectations.\n\nRelevant certifications such as CISSP, CISM, GIAC or equivalent practical expertise.\n\nExperience managing specialist security vendors, penetration testers, managed detection and response providers, and incident response partners.\n\nPersonal Attributes\nCalm and decisive under pressure, particularly during a live incident.\n\nComfortable operating at both strategic and technical levels.\n\nHigh personal ownership, urgency and a bias towards action.\n\nAble to influence without relying solely on formal authority.\n\nCommercially aware and capable of balancing risk, cost and delivery.\n\nCollaborative, credible and able to build trust across different businesses and technical teams.\n\nBenefits\nWe offer all our employees trust and empower our team to work with flexibility and autonomy. We’re a close-knit team and love working collaboratively, with our hybrid model, our team can come together at our fantastic offices, but also focus in their own space. The Tillo team are a motivated bunch and we all work hard to push Tillo forwards, always innovating. We completely understand the importance of work/life balance and offer a supportive and collaborative working environment with the following benefits:\n21 days holiday per annum (plus an additional day for your birthday )\n\nRetirement Fund (5%)\n\nHealth insurance contribution\n\nEmployee Incentive Scheme\n\nHybrid Working\n\nTop spec equipment including laptop, mouse, keyboard, monitor\n\nAnniversary gifts\n\nMonthly breakfasts, drinks, snacks and events\n\nTeam Learning & Development budget\n\nAbout Tillo\nTillo makes gift cards, rewards, and incentives simple, efficient, and profitable. Operating in over 41 countries and 25 currencies, Tillo processes billions in gift card transactions through a single, plug-and-go API, powering rewards and incentives for the world’s leading businesses.\nBacked by Tenzing, Tillo is setting the global standard for digital gift card infrastructure.\nDiversity, Equity, and Inclusion Statement\nWe are committed to fostering a diverse and inclusive workplace where everyone feels valued and respected. We welcome applications from individuals of all backgrounds, regardless of age, disability, gender identity, marital status, race, ethnicity, religion or belief, sex, or sexual orientation. \nIf you require any reasonable adjustments during the recruitment process, please let us know, and we will be happy to accommodate your needs.","description_format":"text","description_chars":10154,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Health insurance","Hybrid work"],"hiring_locations":[{"name":"South Africa","iso":"ZA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Gift Cards & Loyalty Programs","Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-11-13T20:27:26Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":51,"reasons":["conf:1","win:early"],"computed_at":"2026-11-14T03:43:14Z"},"pay":null,"html_url":"https://alion.io/job/tillo-head-of-security","json_url":"https://alion.io/job/tillo-head-of-security.json","meta":{"generated_at":"2026-11-14T03:43:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5706,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52227},"rest":"https://alion.io/mcp/rest/get_company?id=52227"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftillo-head-of-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftillo-head-of-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftillo-head-of-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tillo-head-of-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftillo-head-of-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4280611}},{"tool":"search_jobs","arguments":{"company":"tillo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4280611},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}