We are seeking an experienced Head of Security to build and lead a modern security function that enables the organisation to innovate with confidence whilst protecting our platforms, products, and people. Operating within Technology, this role will define the long-term security strategy across cloud, infrastructure, software engineering, AI, and corporate technology.

Working closely with Platform Engineering, Software Engineering, Architecture, Product, and Compliance, the successful candidate will ensure security is embedded into how we build, deploy, and operate technology rather than acting as a separate control function. This is not a traditional compliance-led security role; we are looking for a technology leader who views security as an engineering discipline.

Main Responsibilities

1. Define and execute the organisation's long-term security strategy aligned to business growth and engineering objectives.
2. Build and lead a modern security organisation spanning Application Security, Infrastructure Security, and Governance.
3. Establish security as an engineering capability by embedding Security-by-Design into platforms, products, and software delivery.
4. Partner with Platform Engineering to build secure-by-default infrastructure, reusable security services, and solutions for engineering teams.
5. Drive the adoption of AI, automation, and intelligent tooling to improve detection, investigation, remediation, and operational efficiency.
6. Develop engineering platforms and self-service capabilities that make the secure path the easiest path for developers.
7. Lead the evolution of DevSecOps practices across cloud infrastructure, CI/CD pipelines, and software delivery.
8. Lead executive response during major security incidents whilst continuously improving cyber resilience and recovery capabilities.
9. Ensure regulatory and compliance requirements are achieved through engineering excellence and automation.
10. Develop meaningful security metrics and executive reporting focused on organisational risk, engineering maturity, and business outcomes.
11. Build high-performing security teams through coaching, mentoring, and technical leadership.
12. Evaluate emerging technologies, AI capabilities, and evolving threat landscapes to continuously strengthen the security posture.
13. Foster a culture where security, engineering, and product teams collaborate to deliver secure, resilient, and scalable technology.

Main Requirements

1. 5+ years of experience leading Security Engineering or Information Security functions within modern cloud-native technology organisations.
2. Demonstrated experience leading multidisciplinary teams across Application Security, Infrastructure Security, and Information Security.
3. Strong technical understanding of modern software engineering, cloud-native platforms, and enterprise infrastructure, with the ability to provide architectural direction.
4. Excellent leadership, communication, and coaching skills with a passion for developing high-performing technical teams.
5. Deep understanding of Secure Software Development Lifecycle (SSDLC), DevSecOps, application security, API security, software supply chain security, and modern developer tooling.
6. Strong understanding of cloud security across AWS, Kubernetes, container security, Infrastructure-as-Code, networking, identity, secrets management, and Zero Trust architectures.
7. Experience with modern detection and response capabilities including SIEM, EDR, vulnerability management, threat modelling, and incident response.
8. Experience developing secure platform capabilities including reusable security services, developer guardrails, and self-service security tooling.
9. Experience leveraging AI, automation, and intelligent tooling to improve security operations and engineering productivity.
10. Proven ability to balance engineering velocity, business objectives, and pragmatic risk management.
11. Experience operating within regulated industries whilst maintaining an engineering-first approach to security.
12. Demonstrated ability to influence executive stakeholders, engineering leaders, and technology strategy through strong technical credibility.

What’s in it for you?

1. Experience a dynamic and team-orientated work environment with opportunities for personal growth and learning.
2. An open, inclusive, and supportive team where your suggestions are welcome.
3. Time Off: 26 days paid holiday per year plus local public holidays, and Birthday Leave (a paid day off in your birthday month).
4. Financial & Risk Benefits: Competitive salary, pension, life assurance (4x annual salary), and private medical insurance.
5. Perks & Wellbeing: Annual wellness allowance, team building opportunities, flexible core hours between 10am and 4pm, 24/7 Employee Assistance Program, and local discounts.