Hybrid opportunity at
ZopaHead of Product Security
Zopa is searching for a Head of Product Security based in London to move the product security discipline into its next stage of development. The discipline…
Career Tools
About This Role
Zopa is searching for a Head of Product Security based in London to move the product security discipline into its next stage of development. The discipline belongs to Information Security and collaborates with engineering, product, architecture, platform and risk colleagues. Its job is to keep change flowing while holding product security exposure in check and safeguarding the bank and the people who bank with it. The head writes the multi-year…
Job Description
Zopa is searching for a Head of Product Security based in London to move the product security discipline into its next stage of development. The discipline belongs to Information Security and collaborates with engineering, product, architecture, platform and risk colleagues. Its job is to keep change flowing while holding product security exposure in check and safeguarding the bank and the people who bank with it.
The head writes the multi-year plan and where money goes, designs how the function will be staffed and run, and builds a strong team with its own succession routes. The post carries accountability for the appetite for product security risk, how well controls work, executive-level metrics and assurance for regulators and auditors. The head counsels the CISO and senior leaders across engineering, product and risk, establishes standards that numerous engineering groups are expected to meet, weaves secure design thinking into everyday delivery, and points investment at the largest risks and business consequences. Applying AI, automation and current security tooling to shrink manual workload is also part of the brief. The reporting line is not stated in the posting. The role is hybrid, with two to three days a week in the London office.
The ideal candidate has set enterprise-wide product security direction in a sprawling engineering setting and has grown an application or product security capability within a regulated technology firm.
Responsibilities
- Chart the multi-year product security direction, the investment programme and the priority list.
- Shape how the team is arranged, how capacity is forecast, and how senior appointments and successors are handled.
- Grow a capable product security team and develop its people.
- Own the risk appetite, the effectiveness of controls, executive KPIs and evidence for regulators and auditors.
- Advise the CISO and executives across engineering, product and risk on product security matters.
- Introduce security standards and encourage their adoption across many engineering domains.
- Weave secure design thinking into engineering practice and software release work.
- Steer funding and engineering effort toward the greatest risks and business effects.
- Deploy AI, automation and modern tooling to remove repetitive security work.
Requirements
- A record of setting enterprise product security direction in a complex engineering organisation.
- Experience leading and expanding a product or application security function.
- Familiarity with running a tightly regulated technology business.
- Ability to recruit senior specialists, organise teams and build capability in people.
- Working depth in application security, secure development practice, DevSecOps and cloud security.
- Skill in reporting product security risk and controls to executives.
- Gets things done through senior engineering, product, risk and security leaders who do not report to you.
- Pragmatic and forward-looking, weighing security exposure against business and customer needs.
Qualifications
- Hands-on use of platforms such as Wiz, Orca, Prisma Cloud, Microsoft Defender for Cloud or GitHub Advanced Security.
- Automating security processes, using AI for vulnerability triage and remediation, and building security tools powered by language models.
- Cutting down manual patching and routine security chores through automation.
Core Skills
Benefits
- Flexible working, including the option to work from overseas for as many as 120 days a year, subject to the right to work in that country.
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this role based?
The role is based in London and is hybrid, with two to three days a week in the London office.
Who does the head report to?
The posting does not state the reporting line. It says the role advises the CISO as a senior Product Security specialist.
What does the role lead?
It leads the Product Security function, including strategy, operating model, hiring and risk appetite.
Is a salary stated?
No. The posting does not specify a salary.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.