Job Summary

We are seeking an experienced Head of Security to build and lead a modern security function that enables the organisation to innovate with confidence whilst protecting our platforms, products and people.

Operating within Technology, this role will define the long-term security strategy across cloud, infrastructure, software engineering, AI and corporate technology. Working closely with Platform Engineering, Software Engineering, Architecture, Product and Compliance the successful candidate will ensure security is embedded into how we build, deploy and operate technology rather than acting as a separate control function.

This is not a traditional compliance-led security role.

We are looking for a technology leader who views security as an engineering discipline. The successful candidate will build secure-by-default platforms, leverage automation and AI to reduce operational overhead, enable engineers to move quickly without compromising security and create a culture where security becomes a competitive advantage rather than a gatekeeper.

Main Responsibilities

• Define and execute the organisation's long-term security strategy aligned to business growth and engineering objectives.
• Build and lead a modern security organisation spanning Application Security, Infrastructure Security and Governance.
• Establish security as an engineering capability by embedding Security-by-Design into platforms, products and software delivery. Socialise and educate.
• Partner with Platform Engineering to build secure-by-default infrastructure, reusable security services and solutions for engineering teams.
• Drive the adoption of AI, automation and intelligent tooling to improve detection, investigation, remediation and operational efficiency.
• Develop engineering platforms and self-service capabilities that make the secure path the easiest path for developers.
• Lead the evolution of DevSecOps practices across cloud infrastructure, CI/CD pipelines and software delivery.
• Lead executive response during major security incidents whilst continuously improving cyber resilience and recovery capabilities.
• Ensure regulatory and compliance requirements are achieved through engineering excellence and automation wherever possible.
• Develop meaningful security metrics and executive reporting focused on organisational risk, engineering maturity and business outcomes.
• Build high-performing security teams through coaching, mentoring and technical leadership.
• Evaluate emerging technologies, AI capabilities and evolving threat landscapes to continuously strengthen the organisation's security posture.
• Foster a culture where security, engineering and product teams collaborate to deliver secure, resilient and scalable technology.