Head of Legal

Octopus Legacy

The Company We’re Octopus Legacy: one of the fastest growing tech companies in the country, part of the UK’s most exciting and best-trusted group (you may have heard of some of our sister companies…) and we have a mission. We’re on a path to scale, aiming to become a household name while transforming an outdated  industry and helping our customers prepare for, and find support after, death. But we can’t do it alone, and that’s why we’re assembling a team of top performers to build with us. Ready to be part of something big? THE ROLE We’re looking for a commercial lawyer to support the company on commercial and contract matters, assist the legal team with compliance, and handle a variety of ad hoc day-to-day legal issues. This is a new role reporting to our Head of Legal. While the focus will be on drafting and negotiating a wide range of commercial contracts and agreements, the fast-paced, dynamic nature of our business means you’ll gain exposure to a broad spectrum of challenging legal topics. This role is also ideal for an experienced paralegal looking to take the next step into a commercial in-house role. KEY RESPONSIBILITIES * Support procurement processes: Drafting and reviewing contracts with third parties. * Support partnerships: Drafting and assisting with the negotiation of contracts with partners (e.g., charities, employers, IFAs). * Identify potential legal and business risks in proposed operations and advise stakeholders on how to successfully navigate or mitigate them. * Contract management: Oversee contracts throughout their lifecycle, from drafting and negotiation through to variations, change orders, innovations and renewal. * Act as a key point of contact for stakeholders across the business on contract, commercial and corporate law matters (with the support of the Head of Legal), handling ad hoc queries. * Advise on and maintain our suite of contract templates and assist with bespoke drafting. * Conduct legal research on issues relevant to the business. * Assist the legal and compliance function in ensuring the company complies with applicable laws and regulations. OUR MISSION Octopus Legacy is the place to plan for death and find support after loss. When people think about planning for death they think about wills, life insurance and funerals. We take these cold processes and turn them into something more human, letting people share more than money: voice notes, music, recipes. A legacy that connects them while they're here, and after they're gone. Founded by Sam after his mum died suddenly, we're a group of people who work in death because we've been affected by it. We know the difference a good plan makes, and what it's like when there isn't one. We see a world where people talk openly about death and work out the real meaning of legacy, one that connects to them. We're here to make that world happen. WHO ARE YOU? * At least 1 year of in-house experience, ideally in a fast-paced or startup environment * 2 yrs PQE (desirable but not essential) * Experience with commercial contracts and general in-house advisory work * Interest in compliance (legal, regulatory, or operational) * Highly organised, with excellent attention to detail and a pragmatic approach to risk * Comfortable working in a lean team and wearing multiple hats * Clear communicator who can break down legal concepts for non-lawyers BENEFITS * Octopus share incentive scheme. * 27 days holiday + an extra day off for your birthday. * Work from anywhere in the world for up to 4 weeks per year. * Vitality Health & Life Insurance. * Pension scheme. * Enhanced parental leave. * Free Will & LPAs + discounts on other Octopus services. * Cycle to Work Scheme and access to the Electric Vehicle (EV) Salary Sacrifice Scheme. * Octopus Giving: we match any charitable fundraising you do up to £500. * Octopus Springboard: where we help our employees become fully-fledged entrepreneurs. * Dog-friendly office, breakfast every day, snacks and wellness activities.

NexGen Cloud

INFORMATION SECURITY OFFICER Location: London Department: Risk and Compliance Reporting to: Head of Risk and Compliance ABOUT NEXGEN CLOUD: NexGen Cloud is the company behind Hyperstack, a full-stack AI cloud serving tens of thousands of customers from AI researchers to enterprises running the world's most compute-intensive workloads. We deliver on-demand and private GPU infrastructure to teams who treat performance as a requirement, not a feature. We're a tight-knit, fast-moving team working at the cutting edge of AI cloud infrastructure. We practice what we preach, equipping our people with AI at every level so we can solve harder problems, ship faster, and keep raising the bar for what enterprise GPU infrastructure looks like. THE ROLE: INFORMATION SECURITY OFFICER This role exists because as we scale our infrastructure and customer base, protecting the systems, data, and trust that underpin Hyperstack is a business-critical priority. You'll have direct ownership over NexGen Cloud's information security posture — from policy and risk frameworks through to incident response and compliance programmes. This is a role for someone who operates independently, thinks in systems, and understands that good security is both a technical and a business discipline. WHAT YOU'LL BE DOING: Rather than a long checklist, here's what success in this role looks like: * Own the development and maintenance of data security policies, standards, and procedures across the organisation * Drive the information security roadmap, coordinating activities across Risk and Compliance, Engineering, and Operations * Lead risk and vulnerability assessments, ensuring findings translate into prioritised remediation actions * Oversee data classification, encryption, and access control frameworks * Lead incident response planning, investigation, and remediation — including playbooks, communications, and documentation — tracking actions through to closure * Collaborate with Engineering, DevOps, Legal, and Compliance to embed security by design * Manage third-party security risk and vendor assessments, escalating material risks appropriately * Build and deliver security awareness programmes across the organisation * Maintain documentation for audits and regulatory reporting ABOUT YOU: We're more interested in how you think and work than in a perfect CV. You'll likely bring a combination of the following: ESSENTIAL * Strong knowledge of data protection laws and regulatory frameworks * Experience in cloud security environments * Deep understanding of encryption, IAM, network security, and secure architecture principles * Proven experience in incident response and risk management * Familiarity with security standards such as ISO 27001, SOC 2, NIST * Ability to translate technical risks into business impact for non-technical stakeholders * Strong communication and cross-functional collaboration skills * Certifications are a plus (e.g. Security+, ISO 27001 Foundation, CC); advanced certifications (CISSP, CISM, CCSP) welcomed but not required NICE TO HAVE * Experience in HPC, GPU, or AI/ML cloud environments * Background in SaaS, IaaS, or enterprise cloud infrastructure security * Experience with zero-trust architecture implementation * Knowledge of container and Kubernetes security * Familiarity with DevSecOps practices and CI/CD security integration * Exposure to international data transfer frameworks and multi-region compliance * Experience with SIEM, SOAR, and advanced threat detection platforms * Involvement in external security audits and penetration testing programmes * Experience leading security certifications or accreditation programmes WHAT WE OFFER: * Competitive salary and annual discretionary bonus scheme * Employee wellbeing benefits * 25 days of holiday, plus public holidays * Flexible working arrangements (remote or hybrid, depending on role and location) * Real ownership and autonomy, with the trust to take initiative and experiment * The opportunity to make a visible, meaningful impact as we scale * Clear career progression and growth opportunities in a fast-growing company * A collaborative, international culture built on trust, transparency, and ownership * The chance to help shape NexGen Cloud's team, culture, and future alongside ambitious, mission-driven colleagues MORE INFORMATION Head over to our NexGen Cloud careers page to view current openings and follow us on LinkedIn and X to learn more about our journey, newest releases and hear exciting news in the neocloud space.

Sumup

ABOUT SUMUP We believe in the everyday hero. Those who have the courage to follow their passion and who have the strength and determination to realise their dreams. Small business owners are at the heart of all we do, so we're creating powerful, easy-to-use financial solutions to help them run their businesses. With a founder’s mentality and a team-first attitude, our diverse teams across Europe, South America and the United States work together to ensure that small business owners can be successful doing what they love. 🌍 YOUR TEAM You’ll join SumUp’s Global Internal Audit team, part of our wider G&A / GRC function, reporting directly to the Global Head of Internal Audit. This team plays a critical role in protecting SumUp’s integrity, supporting regulatory compliance, and strengthening trust with our Board, Audit Committee, and regulators. As our Internal Auditor - IT security specialist,  you’ll bring essential technology and data analytics expertise into a team that partners closely with senior leaders across the business. You’ll be the go-to expert for technology-focused audits, helping shape how we assess IT risks, controls, and governance across a fast-scaling global fintech. 🔍 WHAT YOU’LL DO As an IT Internal Auditor, you’ll support the delivery of SumUp’s approved Internal Audit Plan, with a strong focus on technology, data, and systems risk. In this role, you will: * Plan and execute IT internal audits in line with the annual audit plan * Assess IT general controls, security, governance, and risk management frameworks * Prepare clear, insightful audit reports, presenting findings and recommendations to senior stakeholders * Use data analytics to improve audit efficiency, sample testing, and risk identification * Support ad-hoc audit projects and regulatory-related reviews * Contribute to the continuous improvement of internal audit methodologies, frameworks, and templates * Stay up to date with technology standards, regulatory developments, and industry best practices * Build strong relationships across the business and promote a proactive internal controls culture * Conduct targeted audits of AWS security standards and access controls across our cloud environment, ensuring credit card data stored in cloud services is adequately protected; * Perform risk-based reviews of payment products and ensure security requirements are consistently embedded throughout the development lifecycle. * Identifying anomalies or excessive privileges across different systems and payment platforms. ✅ YOU’LL BE GREAT FOR THIS ROLE IF You’re a hands-on IT auditor who enjoys combining technical depth with clear communication and stakeholder collaboration. Must-have experience: * Minimum 4 years’ experience in IT / Internal Audit within a regulated financial services environment * Strong knowledge of audit standards, risk management, and internal controls * Experience auditing IT controls and frameworks such as COBIT, ISO 27001, PCI DSS, ITIL, NIST, GDPR * Practical exposure to areas like data security, cloud architecture, disaster recovery, security operations, or network infrastructure * Advanced data analytics skills * Professional-level English (written and spoken) Nice to have: * Professional certifications such as CIA, CISA, CPA * Additional IT/security certifications (CISSP, CISM, CRISC, ISO 22301, or similar) * Experience with audit-related data analytics tools What sets you apart: * High ethical standards and integrity * Strong analytical and problem-solving mindset * Confidence influencing change and challenging the status quo constructively * Ability to work independently in a multinational environment ---------------------------------------------------------------------------------------------------------------------------------- 💚 WHY YOU SHOULD JOIN SUMUP 🇬🇧 LONDON, UNITED KINGDOM 🌎 Opportunity to work with a truly global, multicultural team from our central Covent Garden location, wrapped in historic charm and modern flair. This involves an office-first setup 🌈 Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced 🚀 Enrolment onto our VSOP program: you will own a stake in SumUp’s future success 🏖 Generous time off: enjoy 28 days of paid leave, plus bank holidays and special leaves 🏥 Health matters: Vitality health cover, including optical and dental 🚗 Life made easier: salary-sacrifice commuter benefits via Gogeta 💼 Financial security: retirement scheme (SumUp matches 7% when you contribute 5%) 🛡 Peace of mind: life insurance from MetLife for 2× your salary 🌴 Break4me: 1-month sabbatical after 3 years of service 🔗 Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team Job Application Tip We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.