Senior Security Leader: Zero-Trust & Compliance Champion

Jobtailor; Greater London; On-site; GBP 120,000 - 190,000; Full time

Job summary

Valarian seeks a senior security leader to own the company's security posture, risk framework, and product compliance. You will embed security into the engineering culture and ensure customer trust across all products and services.

You will design and drive the Zero-Trust roadmap, manage audit readiness for SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53, and lead DevSecOps integration, vulnerability management, and incident response programs.

Qualifications

• Experience leading security at senior level with enterprise scope.
• Proven ability to implement Zero-Trust roadmaps and risk assessments.
• Experience with SOC 2 Type II and ISO 27001 compliance.

Responsibilities

• Take ownership of Valarian's security posture and risk framework.
• Embed security into engineering culture and maintain customer trust.
• Design and execute Zero-Trust roadmap, policies, and executive reporting.
• Own audit readiness for SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53.
• Embed DevSecOps and secure SDLC into CI/CD pipelines.
• Oversee penetration testing, red teaming, and threat modeling.
• Serve as security authority in procurement reviews and vendor risk assessments.
• Build and manage incident response, continuous monitoring, and vulnerability programs.

Skills

Security leadership

Zero-Trust architecture

Risk assessments

DevSecOps

Executive reporting

Education

Cyber Essentials Plus

NIST 800-53

Tools

CI/CD security tooling

Security Posture Management

Job description

Valarian seeks a senior security leader to own the company's security posture, risk framework, and product compliance. You will embed security into the engineering culture and ensure customer trust across all products and services.

You will design and drive the Zero-Trust roadmap, manage audit readiness for SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53, and lead DevSecOps integration, vulnerability management, and incident response programs.