Job Search

We are seeking a Head of Product Security, Software Supply Chain & AI Security to define and lead a comprehensive security strategy across the product development lifecycle. This senior leadership role will be responsible for protecting software, services, infrastructure, and artificial intelligence capabilities from emerging threats while enabling engineering teams to deliver secure, resilient products at pace. You will establish clear security objectives, influence technology and product roadmaps, and act as a trusted partner to senior stakeholders across engineering, product, architecture, risk, and compliance.

Your responsibilities will include building and managing high-performing product security teams; developing policies, standards, and secure-by-design practices; and embedding security controls throughout software development and deployment processes. You will oversee application security, threat modelling, vulnerability management, security testing, and incident readiness. A key focus will be strengthening software supply chain security, including third-party risk, dependency management, provenance, build integrity, code signing, open-source governance, and the adoption of software bills of materials. You will also lead the development of AI security capabilities covering model risk, data protection, adversarial threats, secure AI engineering, responsible use, and governance of machine learning systems.

The successful candidate will bring significant experience leading product, application, platform, or cloud security functions in complex technology environments. You should have a strong understanding of modern software development, CI/CD, cloud architectures, supply chain threats, vulnerability management, and AI or machine learning security. Experience establishing security programmes, influencing without direct authority, managing senior stakeholders, and translating technical risks into clear business decisions is essential. Relevant industry certifications or equivalent practical expertise are welcome. We value strategic thinking, sound judgement, clear communication, and a pragmatic approach that balances robust risk management with innovation and delivery. This role offers the opportunity to shape security strategy at scale and build capabilities that protect customers, products, and the wider technology ecosystem.