← All roles

Head of Product Security

Zopa· Information Security
Apply on company site
Hybrid (London)Employee - PermanentPosted 4w ago

About the role

Head of Product Security role within Zopa's Information Security team, leading the function through its next stage of maturity, aligning multi-year strategy, operating model, and risk management in a hybrid London-based environment.

Responsibilities

  • Own and deliver the multi-year Product Security strategy, investment roadmap and priorities.
  • Define the Product Security operating model, including team structure, capacity planning, senior hiring and succession.
  • Lead, grow and develop a high-performing Product Security function.
  • Own Product Security risk appetite, control effectiveness, executive KPIs and regulatory/audit assurance.
  • Act as senior Product Security adviser to the CISO and executive Engineering, Product and Risk stakeholders.
  • Set Product Security standards and drive their adoption across multiple engineering domains.
  • Embed Secure by Design principles into engineering and software delivery.
  • Prioritise investment and engineering effort according to security risk and business impact.
  • Use AI, automation and modern security platforms to reduce manual effort and improve security workflows.
  • Demonstrate improvements in security posture, risk reduction, engineering enablement and operational scalability.

Qualifications

  • Proven track record defining and delivering enterprise Product Security strategy across a complex engineering organisation.
  • Significant experience leading and scaling a Product or Application Security function.
  • Experience operating in a complex, regulated technology business.
  • Strong people leadership with experience designing teams, hiring senior talent and developing capability.
  • Deep knowledge of modern Application Security, Secure SDLC, DevSecOps and cloud security.
  • Experience owning and communicating Product Security risk, controls and executive-level metrics.
  • Able to influence senior Engineering, Product, Risk and Security leaders.
  • Proven ability to lead change and drive adoption across engineering teams you don't directly manage.
  • Able to demonstrate measurable improvements in security and engineering outcomes.
  • Pragmatic, forward-thinking and comfortable balancing security risk with business and customer outcomes.

Skills

Required:Product Security strategyleadership and team building

Benefits

  • Hybrid work arrangement with London office 2-3 days per week.
  • Option to work from abroad for up to 120 days a year (subject to right to work in the country).
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Zopa

Easy banking - current accounts, loans & savings

Open a Zopa bank account with cashback and interest. Plus easy-to-use loans, credit cards, savings and more, all in one simple, secure app.

bankingloanssavingscredit cards
Company profileWebsite

More open roles at Zopa