Engineering Manager - Information Security

We’re a multi‑channel, multi‑brand business serving millions of customers a day, with the UK’s largest loyalty scheme and an ever‑evolving set of digital platforms. All of this equals over 1.2 billion transactions each year, presenting a volume, depth and complexity of data that few can match. We don’t think we’re exaggerating when we say we have the most exciting data set in the country. And from the insights gained, we build scalable, high‑performance products using cutting‑edge technology that give our customers an amazing shopping experience – like our award‑winning Smartshop app.

In an inclusive, agile environment, you’ll have the space to be curious, to experiment, and to solve real‑world challenges. And you’ll get to see your creations in the hands of millions of people across the UK. As Engineering Manager for Information Security, you’ll use your engineering expertise to lead a multi‑skilled engineering team, enabling the delivery of solutions to create value, drive efficiency and ensure our business is secure.

You’ll have end‑to‑end ownership of security products for Web proxy and Email gateway security, across Change and Run activities, owning the entire stack, including Service Management. As well as being technically skilled, you’ll be able to drive progress and work collaboratively with Product Owners and the business to influence outcomes as well as supporting the Product Owner to deliver the Product strategy.

You’ll be responsible for recruiting, retaining and motivating your team to deliver end‑to‑end technical solutions for Information Security products. With a constant focus on making things better for our customers, you’ll balance the day‑to‑day delivery of technical development and service, while also proactively planning ahead to maximise opportunities and mitigate risks. You’ll also be a key contributor to the continued progress of engineering practice, including frameworks and tools to support continuous improvement across the business.

More About The Role

• You’ll recruit diverse teams who are both exceptionally talented and fit the culture of the business.
• Mentoring and coaching colleagues within your team using your expertise as a Security Engineer.
• Help shape a world class Information Security engineering function by bringing your experience of cutting‑edge processes and technologies into the business.
• Ensure your team possesses and develops the right skills by deeply understanding the requirements of the product you are building, enhancing and deploying.
• Work with Product Managers to define the Product objectives as well technical direction.
• Work with the Engineers to deliver the technical milestones for each product inline with the Product strategy.
• Work with vendors and strategic partners for all change related activities.
• Act as the technical authority for Gateway Security domains, including Web Security, Email Security, Secure Internet Access and PKI.
• Encourage and facilitate communities of practice to ensure we share best practice across the engineering teams.
• Clear understanding of Agile ways of working. Advocate and embed Agile/lean delivery methodologies.
• Responsible for managing and delivering against initiative level budgets, working closely with Product to do this.
• Responsible for the transitioning products into BAU support and SLA’s, DORA metrics and change, problem and incident management processes within our engineering capabilities.
• Manage the people and product financial data for your team, meeting targets, providing timely and accurate reporting, and creating opportunities for value realisation in line with our internal processes.

Essential Experience

• You’ll be an Engineer with a passion for leading and coaching teams of security engineers, building a culture to bring out the best in your teams by inspiring them and developing strong relationships.
• Someone who likes to roll up their sleeves and has hands on experience of the languages, tools, and infrastructure.
• You’ll be self‑driven and constantly striving to improve your teams, focusing on continuous development.
• You’ll have substantial experience leading engineering professionals in an Information Security environment or high‑tech company.
• Demonstrable experience working with or governing enterprise email security platforms, including anti‑phishing, malware detection, and identity‑based protections.
• Solid understanding of cryptographic concepts and their application in large‑scale enterprise environments.
• Ability to engage confidently in security architecture discussions with peers across Risk, Architecture, Compliance, and Engineering.
• Record of developing and delivering large scale, distributed or complex scale platforms.
• Advanced working knowledge of a coding language/framework such as JavaScript and React and open to learning new languages.
• Ability to prioritise and focus to manage multiple deliveries in different areas.
• Attention to detail, able to foresee potential pitfalls before they arise.
• Ability to manage Capex and Opex lines in the P&L.