Head of Product Security

The Team 

Product Security sits within Information Security and works closely with Engineering, Product, Architecture, Platform and Risk. The function enables teams across Zopa to deliver change while managing Product Security risk and protecting the bank and its customers. As Head of Product Security, you'll lead the function through its next stage of maturity, setting the multi-year direction, scaling the operating model and helping Zopa respond to a security landscape increasingly shaped by cloud technology, automation and AI. 

• Proven track record defining and delivering enterprise Product Security strategy across a complex engineering organisation. 

• Significant experience leading and scaling a Product or Application Security function. 

• Experience operating in a complex, regulated technology business. 

• Strong people leadership with experience designing teams, hiring senior talent and developing capability. 

• Deep knowledge of modern Application Security, Secure SDLC, DevSecOps and cloud security. 

• Experience owning and communicating Product Security risk, controls and executive-level metrics. 

• Able to influence senior Engineering, Product, Risk and Security leaders. 

• Proven ability to lead change and drive adoption across engineering teams you don't directly manage. 

• Able to demonstrate measurable improvements in security and engineering outcomes. 

• Pragmatic, forward-thinking and comfortable balancing security risk with business and customer outcomes. 

• Experience with Wiz, Orca, Prisma Cloud, Microsoft Defender for Cloud, GitHub Advanced Security or equivalent platforms. 

• Experience automating security processes, using AI to assist with vulnerability triage and remediation, and developing LLM-enabled security tooling. 

• Experience reducing manual patching and repetitive security work through automation.