Product Security Lead: Secure by Design

McKinsey & Company; Greater London; On-site; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive benefits package

Job summary

McKinsey & Company seeks a Senior Product Security professional in London to translate central policies into product-level controls across the lifecycle. You will own security posture from design to operations, ensuring security by design, and drive risk assessments, threat modelling, and incident response for strategic products.

You will collaborate with product managers, engineers, SREs, and compliance partners to embed security into roadmaps and governance, defining KPIs and KRIs to track

Qualifications

• Bachelor's degree in a related field or equivalent working experience.
• 5+ years of cybersecurity experience in a similar role.
• Experience translating security policies into product-level controls and documentation.
• Knowledge of access control, logging, encryption, and secure configuration.
• Experience coordinating risk assessments, threat modelling and vulnerability assessments.

Responsibilities

• Interpret and cascade central security policies into product-specific controls.
• Own the product's security posture across design, build, test, release and operations.
• Maintain and prioritise the product's security backlog and risk assessments.
• Monitor security events, support incident response, and drive lessons learned.
• Promote security awareness within the product team and governance forums.
• Define product-level security KPIs and KRIs with cross-functional teams.

Skills

Security by design

Threat modelling

Vulnerability assessments

Audit-ready documentation

Access control

Encryption

Incident response

Security governance

Stakeholder collaboration

Communication skills

Education

Bachelor's degree

Job description

McKinsey & Company seeks a Senior Product Security professional in London to translate central policies into product-level controls across the lifecycle. You will own security posture from design to operations, ensuring security by design, and drive risk assessments, threat modelling, and incident response for strategic products.

You will collaborate with product managers, engineers, SREs, and compliance partners to embed security into roadmaps and governance, defining KPIs and KRIs to track