Senior AppSec Program Lead (Player-Coach)

Pleo; United Kingdom; Hybrid; GBP 120,000 - 170,000; Full time

Benefits offered by this job

Private healthcare

Flexible working hours

Remote or hybrid options

Professional development

Lunch allowance

Wellbeing support

Pleo card

Job summary

Pleo is seeking a Senior Application Security Manager to lead vulnerability management, shape long-term AppSec strategy, and collaborate with engineering to embed security across the organisation. You will be a player-coach, driving risk-ranked action with hands-on depth and strategic oversight.

In a fintech environment, you will mentor engineers, drive automation, and ensure compliance with ISO27001, PCI-DSS, and GDPR across regions.

Qualifications

• 10+ years in application security or information security with leadership experience.
• Hands-on depth to credibly engage with engineering teams and seniors.
• Proven mentoring ability and accountability without micromanagement.
• Experience turning signals into prioritized, risk-based actions.
• Experience applying AI/automation to scale security coverage in fintech.

Responsibilities

• Own vulnerability management end to end, reporting, triage, mitigation, and strategy.
• Develop a risk-ranked remediation approach and clear, company-wide reporting.
• Set an AppSec roadmap with delivery expectations and accountability.
• Partner with engineering squads as customers, embedding security into workflows.
• Mentor engineers toward staff-level capability and team growth.
• Support compliance across ISO27001, PCI-DSS, GDPR in multiple markets.

Skills

AppSec strategy

Security leadership

Mentoring engineers

Risk-based triage

AI & automation in security

Influence without authority

Fintech compliance exposure

Job description

Pleo is seeking a Senior Application Security Manager to lead vulnerability management, shape long-term AppSec strategy, and collaborate with engineering to embed security across the organisation. You will be a player-coach, driving risk-ranked action with hands-on depth and strategic oversight.

In a fintech environment, you will mentor engineers, drive automation, and ensure compliance with ISO27001, PCI-DSS, and GDPR across regions.