Head of Security in London

We are seeking an experienced Head of Security to build and lead a modern security function that enables the organisation to innovate with confidence whilst protecting our platforms, products and people.

Operating within Technology, this role will define the long-term security strategy across cloud, infrastructure, software engineering, AI and corporate technology. Working closely with Platform Engineering, Software Engineering, Architecture, Product and Compliance, the successful candidate will ensure security is embedded into how we build, deploy and operate technology rather than acting as a separate control function. This is not a traditional compliance-led security role. We are looking for a technology leader who views security as an engineering discipline. The successful candidate will build secure-by-default platforms, leverage automation and AI to reduce operational overhead, enable engineers to move quickly without compromising security and create a culture where security becomes a competitive advantage rather than a gatekeeper.

Main Responsibilities

• Define and execute the organisation's long-term security strategy aligned to business growth and engineering objectives.
• Build and lead a modern security organisation spanning Application Security, Infrastructure Security and Governance.
• Establish security as an engineering capability by embedding Security-by-Design into platforms, products and software delivery. Socialise and educate.
• Partner with Platform Engineering to build secure-by-default infrastructure, reusable security services and solutions for engineering teams.
• Drive the adoption of AI, automation and intelligent tooling to improve detection, investigation, remediation and operational efficiency.
• Develop engineering platforms and self-service capabilities that make the secure path the easiest path for developers.
• Lead the evolution of DevSecOps practices across cloud infrastructure, CI/CD pipelines and software delivery.
• Lead executive response during major security incidents whilst continuously improving cyber resilience and recovery capabilities.
• Ensure regulatory and compliance requirements are achieved through engineering excellence and automation wherever possible.
• Develop meaningful security metrics and executive reporting focused on organisational risk, engineering maturity and business outcomes.
• Build high-performing security teams through coaching, mentoring and technical leadership.
• Evaluate emerging technologies, AI capabilities and evolving threat landscapes to continuously strengthen the organisation's security posture.
• Foster a culture where security, engineering and product teams collaborate to deliver secure, resilient and scalable technology.

Main Requirements

• 5+ years experience leading Security Engineering or Information Security functions within modern cloud-native technology organisations.
• Demonstrated experience leading multidisciplinary teams across Application Security, Infrastructure Security and Information Security.
• Strong technical understanding of modern software engineering, cloud-native platforms and enterprise infrastructure, with the ability to provide architectural direction across all three domains.
• Excellent leadership, communication and coaching skills with a passion for developing high-performing technical teams.
• Deep understanding of Secure Software Development Lifecycle (SSDLC), DevSecOps, application security, API security, software supply chain security and modern developer tooling.
• Strong understanding of cloud security across AWS, Kubernetes, container security, Infrastructure-as-Code, networking, identity, secrets management and Zero Trust architectures.
• Experience with modern detection and response capabilities including SIEM, EDR, vulnerability management, threat modelling and incident response.
• Experience developing secure platform capabilities including reusable security services, developer guardrails and self-service security tooling.
• Experience leveraging AI, automation and intelligent tooling to improve security operations, engineering productivity and organisational resilience.
• Proven ability to balance engineering velocity, business objectives and pragmatic risk management.
• Experience operating within regulated industries whilst maintaining an engineering-first approach to security.
• Demonstrated ability to influence executive stakeholders, engineering leaders and technology strategy through strong technical credibility.

What’s in it for you?

• Experience a dynamic and team-orientated work environment.
• Opportunities for personal growth and learning.
• An open, inclusive and supportive team where you will be valued, and your suggestions will be welcome.
• 26 days paid holiday per year, in addition to local public holidays.
• Birthday Leave, a paid day off in the month of your birthday.
• Competitive Salary.
• Risk Benefits such as Pension, Life Assurance (4x annual salary), Private Medical Insurance.
• Annual Wellness Allowance.
• Team Building Opportunities.
• Flexible core hours between 10am – 4pm.
• Receive support whenever you need it with our Employee Assistance Program, available 24/7.
• Local discounts and more…

Our team is committed to keeping remuneration and benefits under constant review to make sure what we offer stays relevant.