Security & Resilience Lead

Security & Resilience Lead

📍 Manchester (Hybrid, up to 4 days WFH)

💰 £50k-£70k (negotiable)

Street Group is one of the fastest-growing PropTech companies in the UK. We want to be the leading creator of delightful experiences for everybody involved in buying, selling, renting and letting property, regardless of their involvement, to improve the industry for everybody by elevating UK Estate Agencies through world-class technology.

This role exists because we're growing fast, working towards ISO certification, and taking on bigger, more regulated customers. All of which means the security practices we handle today need to be documented and independently owned. We're now looking for a Security & Resilience Lead - who'll ensure Street Group's security function operates effectively and continually improves.

You'll work with the Head Of Security to decide what tools, processes and controls should be used, and lead with the ongoing configuration and maintenance of those tools to shape how security is embedded across the business - from development through to customer onboarding and off boarding. There's no team to inherit and no existing playbook to follow: just the opportunity to build one.

Here's what you can expect to be working on as our Security & Resilience Lead

• Working with technical teams review the security impact of technology changes and ensure security controls are met before production releases.

• Make sure environments are configured securely, verify controls and oversee technical change so access and data are handled appropriately.

• Monitor threat intelligence for company exposure, review emerging threats, and share relevant intelligence with stakeholders.

• Lead the response to security incidents, coordinating investigations and root cause analysis, and producing clear and accurate reports for internal and external stakeholders.

• Own our security monitoring capability, ensuring effective logging across key platforms and improving detection while preventing alert storms and false positives.

• Own the penetration testing and vulnerability management programme - not just detecting vulnerabilities, but risk-assessing them, deciding what needs fixing and working with the tech teams on solutions to close them down.

• Promote secure de