Head of Product Security

Overview

As Head of Product Security at Zopa, you will define the multi-year security strategy and scale the Product Security function. You’ll collaborate with Engineering, Product and Risk to embed Secure by Design and drive risk-aware engineering across domains. You’ll lead a high-performing team, set standards, and translate risk into measurable executive metrics. This role connects security to business outcomes in a cloud-driven, AI-enabled environment, shaping how we protect customers and modernize banking products.

Pay / Benefits

• hybrid working with London office 2-3 days per week
• option to work from abroad up to 120 days per year
• focus on work-life balance
• diversity and inclusion ethos
• AI-enabled work environment
• competitive compensation (inferred)

Responsibilities

• Define and deliver the multi-year Product Security strategy, roadmap, and priorities
• Design and scale the Product Security operating model and leadership structure
• Lead, grow and develop the Product Security function and its talent
• Own risk appetite, control effectiveness, and executive/audit metrics for Product Security
• Advise the CISO and executive stakeholders on security posture and risk
• Set Product Security standards and drive adoption across engineering domains
• Embed Secure by Design into software delivery and development processes
• Prioritize security investment based on risk and business impact
• Leverage AI, automation and modern security platforms to improve workflows and reduce manual effort
• Demonstrate improvements in security posture, risk reduction, and scalability

Key requirements

• Enterprise Product Security strategy experience in a complex engineering organisation
• Experience leading and scaling a Product or Application Security function
• Proven ability to operate in a regulated technology business
• Strong people leadership with senior talent hiring and capability development
• Deep knowledge of Application Security, Secure SDLC, DevSecOps and cloud security
• Experience owning security risk, controls and executive-level metrics
• Ability to influence senior Engineering, Product, Risk and Security leaders
• Proven track record of driving measurable security and engineering improvements
• Pragmatic, forward-thinking mindset balancing security risk with business outcomes

• leadership
• influence
• communication with executive stakeholders
• Modern Application Security
• Secure SDLC
• DevSecOps

…