Security and Compliance Product Lead

Reference: by2wpgwgen8sw3ipke7o

Security and Compliance Product Lead

An exciting opportunity has arisen for an experienced Security and Compliance Product Lead to shape and deliver a product strategy that strengthens security, regulatory compliance and risk management across a growing technology environment. You will define priorities, translate complex requirements into practical product outcomes and ensure that security and compliance are embedded throughout the product lifecycle.

You will own and maintain the product roadmap, balancing customer needs, business objectives, emerging threats and regulatory change. Working closely with engineering, information security, legal, risk, operations and customer-facing teams, you will turn legislation, industry standards and internal policies into clear requirements, user stories and measurable outcomes. You will also oversee the delivery of controls, assurance capabilities, reporting tools and processes that support secure and compliant operations.

Key responsibilities will include managing the product backlog, setting delivery priorities, coordinating cross-functional initiatives and monitoring progress against agreed objectives. You will engage with stakeholders at all levels, communicate risks and dependencies clearly, and use data, audits, incidents and customer feedback to identify opportunities for continuous improvement. You will also support readiness for external assessments and help ensure that evidence, documentation and control ownership remain accurate and accessible.

To succeed in this role, you will have proven experience in product management, security, compliance, governance, risk or a closely related discipline. You will be confident working with technical and non-technical stakeholders and able to simplify complex regulatory or security concepts into actionable plans. Experience with recognised frameworks such as ISO 27001, SOC 2, NIST or PCI DSS would be advantageous, as would familiarity with privacy legislation and software delivery methodologies.

You will be an organised, analytical and collaborative professional with strong judgement, communication skills and a proactive approach to problem-solving. The ability to influence without direct authority, manage competing priorities and operate effectively in a changing environment is essential. In return, you will have the opportunity to make a significant impact on the organisation’s security posture, customer trust and long-term product direction.

COMPETITIVE SALARY
Added 26/10/2026
Reference: by2wpgwgen8sw3ipke7o

Security and Compliance Product Lead

Birmingham, England, United Kingdom Permanent Compliance

Other similar jobs

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Schools Data Protection and Compliance Lead

Added 08/10/2026

We are seeking a knowledgeable and proactive Schools Data Protection and Compliance Lead to provide expert advice and practical support across a group of educational settings. This role will lead the development, implementation and monitoring of data protection, information governance and compliance arrangements, ensuring that personal information relating to pupils, families, staff and other stakeholders is handled lawfully, securely and transparently. Working closely with school leaders, administrative teams, IT colleagues and external advisers, you will maintain and review privacy notices, records of processing activities, data retention schedules, data sharing agreements and information security procedures. You will advise on data protection...

Learn more

Schools Data Protection and Compliance Lead

Added 07/10/2026

We are seeking a knowledgeable and proactive Schools Data Protection and Compliance Lead to provide expert advice and practical support across a group of schools. This role will lead the development, implementation and monitoring of data protection, information governance and compliance arrangements, helping schools manage personal information lawfully, securely and effectively. You will work closely with senior leaders, school business managers, designated safeguarding leads, staff, governors and external partners to promote a strong culture of accountability and good information-handling practice. Your responsibilities will include maintaining and reviewing data protection policies, procedures, records of processing activities, privacy notices, data retention schedules...

Learn more

Advisory Engineer, AI Governance and Product Security

Added 08/09/2026

We are seeking an Advisory Engineer, AI Governance and Product Security to help build safe, secure and trustworthy artificial intelligence products. This role will provide practical technical guidance across the product lifecycle, from early research and design through deployment, monitoring and continuous improvement. You will work closely with software engineers, product managers, data scientists, security specialists, legal advisers and risk teams to translate emerging AI governance expectations into clear, workable engineering practices. Your responsibilities will include assessing AI systems for security, privacy, safety and regulatory risks; developing threat models and control requirements; advising on secure architecture, data protection, access management...

Learn more

Global Product Security Services Lead

Added 18/09/2026

We are seeking an experienced Global Product Security Services Lead to define and deliver a comprehensive security services strategy across the product lifecycle. In this influential role, you will lead the development of scalable security capabilities that support product teams, engineering functions, and business stakeholders across multiple regions. You will help embed security by design, strengthen resilience, and ensure that products meet relevant regulatory, industry, and customer expectations. Key responsibilities include owning the global product security services roadmap, establishing operating models, and setting standards, processes, and performance measures for secure product development. You will oversee services such as threat modelling,...

Learn more

Global Product Security Services Lead

Added 17/09/2026

We are seeking an experienced Global Product Security Services Lead to define and deliver a comprehensive security services strategy across the product lifecycle. In this influential role, you will lead the development of scalable security capabilities that protect products, customers, data, and critical business operations. You will work closely with engineering, product management, enterprise security, risk, compliance, and regional teams to embed security by design and strengthen resilience across a diverse global portfolio. Your responsibilities will include setting the vision, roadmap, operating model, and service standards for product security. You will oversee capabilities such as secure development practices, security architecture,...

Learn more

Privacy Product Lead EMEA (12 month contract)

Added 16/10/2026

We are seeking an experienced Privacy Product Lead to join a fast-paced, internationally focused team on a 12-month contract. This is an influential role responsible for shaping and delivering privacy products, services and capabilities across the EMEA region. You will work at the intersection of product management, privacy, legal, technology and commercial teams, translating complex regulatory requirements into practical, scalable solutions that support customer trust and business growth. You will define and maintain the regional privacy product strategy, roadmap and priorities, ensuring alignment with wider business objectives and evolving legislation. Responsibilities will include identifying market and customer needs; gathering and...

Learn more

Lead Digital Product Manager - Customer Identity & Access Management (hybrid/remote)

Added 13/10/2026

We are seeking an experienced Lead Digital Product Manager to shape and deliver a modern Customer Identity and Access Management (CIAM) product strategy across digital channels. In this role, you will define the vision, roadmap and prioritised backlog for customer authentication, registration, profile management, consent, authorisation and identity security. You will ensure that identity services provide a seamless, secure and accessible experience while meeting business, regulatory and data protection requirements. You will lead cross-functional delivery across product, engineering, cybersecurity, architecture, data, legal, compliance, design and customer experience teams. Responsibilities include gathering and prioritising customer and business needs, translating them into...

Learn more

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 09/10/2026

We are seeking a Senior Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help maintain confidence in the organisation’s security, privacy and resilience controls by coordinating assurance programmes, supporting regulatory requirements and engaging with internal and external stakeholders. You will work closely with security, compliance, risk, legal, audit and operational teams to assess control effectiveness and promote continuous improvement. Key responsibilities include managing evidence collection for internal and external audits, coordinating responses to customer and regulatory assessments, and preparing clear, accurate reports for senior stakeholders. You will review security and compliance...

Learn more

Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 25/09/2026

We are seeking a Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help demonstrate that cloud services, business processes and operational controls meet applicable regulatory, contractual and industry requirements. You will work with security, legal, privacy, risk, audit and engineering teams to assess control effectiveness, coordinate evidence and communicate assurance outcomes to internal and external stakeholders. Key responsibilities include supporting customer, regulatory and third-party assurance requests; coordinating audit and assessment activities; reviewing policies, procedures and control documentation; and identifying opportunities to improve the efficiency and consistency of assurance processes. You will...

Learn more

Security and Compliance Engineer

Added 02/11/2026

We are seeking a Security and Compliance Engineer to help protect critical systems, data and services while supporting a strong culture of risk management and regulatory compliance. This role will work across technology, engineering and operational teams to identify security risks, implement effective controls and promote secure-by-design practices throughout the organisation. You will be responsible for monitoring and improving security controls across cloud and on-premises environments, reviewing system configurations and supporting vulnerability management activities. You will investigate security alerts and incidents, coordinate remediation, and contribute to post-incident reviews. The role will also involve maintaining security documentation, policies, standards and procedures,...

Learn more

Information Security Governance and Compliance Analyst

Added 06/10/2026

We are seeking an Information Security Governance and Compliance Analyst to support the development, implementation, and continuous improvement of information security governance and compliance practices. This role will help ensure that policies, standards, procedures, and controls are aligned with business objectives, regulatory obligations, and recognised security frameworks. The successful candidate will work closely with technology, risk, legal, privacy, audit, and business stakeholders to promote a consistent and effective approach to information security. Key responsibilities include maintaining the information security policy and control framework; coordinating compliance assessments, internal reviews, and external audits; monitoring regulatory and industry developments; and supporting the remediation...

Learn more

Head of Information Security, Risk and Compliance

Added 22/09/2026

We are seeking an experienced Head of Information Security, Risk and Compliance to lead the development and delivery of a robust security, risk and compliance programme. This is a senior leadership role responsible for protecting information assets, strengthening organisational resilience and ensuring that security practices support business objectives. You will establish a clear strategic roadmap, provide trusted advice to senior stakeholders and promote a culture in which security and responsible risk management are embedded across the organisation. Your responsibilities will include owning information security governance, policies, standards and control frameworks; overseeing risk identification, assessment, treatment and reporting; and ensuring compliance...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

UK Head of IT Risk and Compliance

Added 02/11/2026

An exciting opportunity has arisen for a UK Head of IT Risk and Compliance to lead the development and delivery of a robust technology risk and compliance framework. This senior role will provide strategic direction, assurance and constructive challenge across information technology, cyber security, data protection and operational resilience. You will be responsible for maintaining an effective IT risk management programme, ensuring that risks are identified, assessed, recorded and treated consistently. Working closely with technology and business leaders, you will oversee risk appetite, control effectiveness, remediation plans and management reporting, providing clear insight to senior stakeholders and relevant governance forums....

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.