Technical Security Governance Lead - Software Development (Open)
HybridLondon, England, United Kingdom
Job Summary
Define and evolve secure software development standards, guardrails, and governance practices across cloud-native platforms, APIs, and AI-enabled applications. Partner with engineering and product teams to embed security into development lifecycles and delivery processes, improving visibility into vulnerabilities, insecure coding trends, and dependency risks. Strengthen software supply chain governance, including open-source dependencies and Software Bill of Materials (SBOM) practices, while supporting secure CI/CD pipelines through code scanning and secrets detection. Provide insight and reporting to ensure software security risks are understood, prioritized, and effectively managed, driving continuous improvements in security maturity. Work within the Digital Security & Risk Management team to influence secure-by-design approaches at global scale.
Required Qualifications
- Experience in application security, software security, DevSecOps, software assurance or technical security governance
- Strong understanding of Secure SDLC, application security and modern software development practices
- Knowledge of CI/CD security, cloud-native environments and software supply chain risk
- Experience working closely with engineering teams to improve security outcomes
- Strong stakeholder management and communication skills, with the ability to influence technical and non-technical audiences
- A pragmatic approach to balancing security, risk and delivery
- #LI-Hybrid
Desired Qualifications
- Experience with cloud platforms such as AWS, Azure or Google Cloud
- Knowledge of SAST, DAST, SCA or software security tools
- Experience with AI-enabled applications and emerging software security challenges
- Security certifications such as CISSP, CSSLP or equivalent
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.