VP – Product Security

Location: London, United Kingdom

Number of Openings: 1

Job Overview

We are seeking a visionary leader to head the Product Security function. The VP – Product Security will be responsible for defining and executing the security strategy for all product portfolios, ensuring robust protection against emerging threats while enabling rapid innovation and market delivery.

Key Responsibilities

• Develop and own the end‑to‑end product security strategy aligned with corporate objectives and regulatory requirements.

• Lead a multidisciplinary security team (engineers, analysts, auditors) across all product lines, fostering a culture of security‑first thinking.

• Collaborate with product management, engineering, and operations to embed security controls throughout the product lifecycle—from design and development to release and maintenance.

• Define security architecture standards, threat modeling processes, vulnerability management frameworks, and secure coding guidelines.

• Oversee security testing activities, including penetration testing, code reviews, static and dynamic analysis, and third‑party assessments.

• Drive incident response and remediation for product‑related security events, ensuring timely communication with stakeholders and customers.

• Represent the organization in industry forums, regulatory bodies, and client engagements on product security matters.

• Manage budget, vendor relationships, and procurement of security tools and services.

• Report regularly to senior leadership on security posture, risk metrics, and compliance status.

Essential Qualifications

• Master’s degree in Computer Science, Cybersecurity, Information Security, or a related discipline (or equivalent professional experience).

• Professional security certifications such as CISSP, CISM, or equivalent are strongly preferred.

• Deep knowledge of security frameworks and standards (e.g., ISO 27001, NIST, OWASP, GDPR, PCI‑DSS).

• Proven expertise in secure software development practices, cryptography, secure architecture, and risk management.

• Exceptional leadership, communication, and stakeholder‑management skills.

Desired Experience

• 10+ years of progressive experience in information security, with at least 5 years in a senior product‑security or security‑architecture role.

• Demonstrated success in building and scaling security teams within fast‑growing technology companies.

• Hands‑on experience with security tooling (e.g., SAST/DAST, SBOM, runtime application self‑protection, cloud security platforms).

• Track record of delivering secure products in regulated industries such as finance, healthcare, or telecommunications.

• Experience managing large, complex security projects and budgets.

Salary & Benefits

• Competitive annual salary (paid in Pounds £) commensurate with experience.

• Performance‑based bonuses and equity participation.

• Comprehensive health, dental, and vision plans.

• Generous pension scheme.

• Flexible working arrangements and generous holiday entitlement.

• Professional development budget and support for certifications.

• Access to state‑of‑the‑art security labs and tools.

Application Process

Qualified candidates are invited to submit their CV and a cover letter outlining their relevant experience and vision for product security. Applications will be reviewed on a rolling basis.

This search is conducted by Spear Point Search: The Search Firm For Capital Markets.

We are NOT incentivised to place. We are incentivised to be right. That means we tell clients when compensation is misaligned with the talent they need, we tell candidates when a role isn't what they think it is, AND we walk away from searches that don't have the conditions to succeed. This costs us fees. It is also why people call us back.