Lead Security Engineer

JR United Kingdom; London; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading Health-Tech scale-up is seeking an Info Sec / DevSecOps Engineering Lead to drive security and compliance across their platform. This pivotal role involves collaborating with engineering teams, ensuring adherence to health tech regulations, and managing security policies. The ideal candidate will have extensive experience in security frameworks like ISO 27001 and UK GDPR, and a strong background in cloud environments, particularly AWS.

Qualifications

• Minimum of 5 years’ experience in Security, Compliance, or DevSecOps roles.
• Strong expertise in ISO 27001, UK GDPR, and related industry frameworks.

Responsibilities

• Establish and enforce security and compliance policies across infrastructure.
• Create and manage a roadmap for achieving ISO 27001 certification.
• Collaborate closely with engineering teams to ensure secure system architecture.

Skills

Security

Compliance

DevSecOps

AWS

Tools

SIEMs

CSPM solutions

vulnerability assessment platforms

Job description

Social network you want to login/join with:

NearTech have partnered with an innovative and purpose-led Health-Tech scale up to find them an Info Sec / DevSecOps Engineering Lead. You will take ownership of security, privacy, and regulatory compliance across their platform and products. This role will work closely with engineering, product, and leadership teams to design and implement secure systems and maintain alignment with health tech regulations, including ISO 27001, UK GDPR, and frameworks relating to AI in healthcare and Software as a Medical Device (SaMD).

This is a key hire for an exciting Healthtech company where you will have a huge impact!

Key Responsibilities:

• Establish and enforce security and compliance policies across infrastructure, applications, and operational workflows.
• Create and manage a roadmap for achieving ISO 27001 certification; support additional standards such as Cyber Essentials Plus and NHS DSPT.
• Lead internal compliance audits and facilitate preparations for external assessments.
• Integrate security best practices throughout the software development lifecycle.
• Collaborate closely with engineering teams to ensure secure system architecture (hosted on AWS) and deployment methods.
• Monitor and report on emerging security threats related to AI, cloud technologies, and web infrastructure.
• Oversee the creation and maintenance of policy documents, employee training, and incident response protocols.
• Track relevant regulatory developments and ensure continuous compliance.
• Serve as the central contact for all security and compliance issues.
• Work in partnership with Legal and Operations teams to coordinate compliance initiatives.

Required Experience:

• Minimum of 5 years’ experience in Security, Compliance, or DevSecOps roles (ideally within health tech or similarly regulated industries).
• Strong expertise in ISO 27001, UK GDPR, and related industry frameworks.
• Direct involvement with ISO audits and certification processes.
• Solid knowledge of cloud environments, especially AWS, and web application security principles.
• Familiarity with security tools such as SIEMs, CSPM solutions, and vulnerability assessment platforms.
• Prior experience working with UK healthcare entities, including the NHS or private providers.

If you come from a Info Security / DevSecOps / Security Engineering background and excited by the prospect of working for a Health-Tech scale-up, please apply with a copy of your CV ASAP.