Hybrid Head of Security - SaaS & Cloud Security Leader

Aptitude Software; Greater London; Hybrid; GBP 140,000 - 210,000; Full time

Job summary

Aptitude Software is seeking a Head of Security in London, hybrid. You will own the security function across product and cloud security, governance, risk and compliance, and vendor security.

You will report to the CPTO and lead four security professionals. Your role requires extensive experience in security for SaaS/regulated customers, with hands-on technical expertise in cloud, Kubernetes, and secure software development.

Qualifications

• Hands-on security background with leadership experience.
• Experience in software/SaaS for regulated enterprises.
• Implementing and managing ISO 27001, SOC 2 and PCI DSS.
• Cloud security across AWS and Azure; Kubernetes familiarity.
• Strong governance, risk, and compliance capabilities.
• Proven ability to lead a security team and manage budgets.

Responsibilities

• Define and own security strategy and roadmap for Aptitude Software.
• Oversee product and cloud security, governance, risk and compliance.
• Manage audits, certifications and data protection controls.
• Lead business continuity and disaster recovery programmes.
• Lead and develop a team of security professionals.
• Collaborate with technology leadership to embed security in engineering.

Skills

Threat modelling

Vulnerability management

Cloud security

Identity and access

Secure SDLC

Detection & response

Team leadership

Audits & certifications

ISO 27001

SOC 2

PCI DSS

AWS & Azure

Kubernetes

Infrastructure as code

CI/CD

Vendor risk management

Job description

Aptitude Software is seeking a Head of Security in London, hybrid. You will own the security function across product and cloud security, governance, risk and compliance, and vendor security.

You will report to the CPTO and lead four security professionals. Your role requires extensive experience in security for SaaS/regulated customers, with hands-on technical expertise in cloud, Kubernetes, and secure software development.