Chief Product Security & Risk Leader

Zopa Bank Limited; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

London office access

Remote work up to 120 days/year

Job summary

Zopa Bank Limited seeks a Head of Product Security to steer the multi-year strategy across engineering, product and risk, aligning security with business aims. You’ll lead a high-performing team, drive Secure by Design, and partner with the CISO to reduce risk while enabling scalable, cloud-first delivery.

This hybrid London role blends strategy with hands-on security leadership in a regulated fintech environment.

Qualifications

• Proven track record defining and delivering enterprise Product Security strategy across a complex engineering organisation.
• Significant experience leading and scaling a Product or Application Security function.
• Experience operating in a complex, regulated technology business.
• Strong people leadership with experience designing teams, hiring senior talent and developing capability.
• Deep knowledge of modern Application Security, Secure SDLC, DevSecOps and cloud security.
• Experience owning and communicating Product Security risk, controls and executive-level metrics.

Responsibilities

• Own and deliver the multi-year Product Security strategy, investment roadmap and priorities.
• Define the Product Security operating model, including team structure, capacity planning, senior hiring and succession.
• Lead, grow and develop a high-performing Product Security function.
• Own Product Security risk appetite, control effectiveness, executive KPIs and regulatory/audit assurance.
• Act as senior Product Security adviser to the CISO and executive Engineering, Product and Risk stakeholders.
• Set Product Security standards and drive their adoption across multiple engineering domains.
• Embed Secure by Design principles into engineering and software delivery.
• Prioritise investment and engineering effort according to security risk and business impact.
• Use AI, automation and modern security platforms to reduce manual effort and improve security workflows.
• Demonstrate improvements in security posture, risk reduction, engineering enablement and operational scalability.

Skills

Product security strategy

Leadership

Security risk management

DevSecOps

Cloud security

Executive communication

Stakeholder management

Regulated technology

Security governance

Tools

Wiz

Orca

Prisma Cloud

Microsoft Defender for Cloud

GitHub Advanced Security

Job description

Zopa Bank Limited seeks a Head of Product Security to steer the multi-year strategy across engineering, product and risk, aligning security with business aims. You’ll lead a high-performing team, drive Secure by Design, and partner with the CISO to reduce risk while enabling scalable, cloud-first delivery.

This hybrid London role blends strategy with hands-on security leadership in a regulated fintech environment.