Head of Product Security

We are looking to hire a new role and bring someone in as our Head of Product Security, a key leadership role within our Information Security team. In this role you will shape how Our Future Health builds secure, trusted products at national scale. You’ll lead the security engineering and architecture functions, ensuring they provide clear and pragmatic guidance to product, engineering, and wider technical teams.

Your work centres on embedding secure‑by‑design thinking, strengthening how the organisation understands and manages risk, and helping teams see security as an enabler that supports delivery rather than slowing it down. You’ll also contribute hands‑on technical input to complex architectural decisions where your expertise adds real value.

Alongside this strategic impact, you’ll manage and develop a growing team, ensuring smooth day to day operations and a culture of continuous improvement. The role needs empathetic people leadership, exceptional stakeholder management, and the ability to influence across a fast‑moving, agile environment. With an engineering background and solid security architecture experience, you’ll bring the technical credibility and collaborative approach needed to guide teams, shape priorities, and drive the future direction of product security.

At Our Future Health, our mission is to transform the prevention,detection and treatment of conditions such as dementia, cancer, diabetes, heart disease and stroke. We’re looking for people to join us on our journey. If you’re looking for a new challenge where you can contribute to helping future generations live in good health for longer, then we’re keen to speak with you.

• Acting as deputy to the Director of Information Security, supporting security strategy and leadership alongside the Head of Cyber Defence.
• Leading the security consultancy and technical security functions, covering core services such as IAM, vulnerability management, threat modelling, and secure base image maintenance.
• Serving as the primary contact for security consultancy, delegating work across the team as needed.
• Overseeing security architecture and engineering for our cloud‑native (Azure) production and corporate platforms.
• Driving continuous improvement, prioritising enhancements and maturing operational documentation.
• Line managing a multidisciplinary security team, including security engineers, application security specialists, and a security architect.
• Coaching and mentoring team members across all security disciplines.
• Advising product, engineering, and data squads on embedding security into their work and processes.
• Communicating security risks, threats, and requirements to both technical and non‑technical colleagues.
• Promoting security standardisation and consistency across platforms.
• Collaborating with technical and data architects on broader architectural decisions.
• Supporting organisational compliance by ensuring colleagues and contractors understand and meet their security responsibilities.

• Working in a siloed environment with no freedom to make decisions.
• Working in a place where you can’t see the impact your expertise makes.

To succeed in this role you will be able to demonstrate some of the following skills and experience:

• Proven ability to manage and develop high‑performing security teams while fostering a collaborative, people‑centred environment.
• Demonstrable experience partnering with product teams to integrate security requirements into roadmaps, balancing security with usability and overall user experience.
• Previous experience working with Dev Sec Ops  or similar delivery models, embedding security in a way that supports rapid, iterative development.
• Experience designing secure cloud‑native architectures at both conceptual and detailed technical levels.
• Familiarity with Microsoft security technologies such as Defender, Sentinel, Entra, and Purview.
• An understanding of modern software engineering practices including source control, testing, code review, design documentation, and effective debugging.
• Advanced knowledge of security risk management and threat modelling.
• Solid understanding of core security…