The Company

A fast growing technology company that provides an end-to-end financial planning platform for financial advisers, including modules for risk profiling, cashflow modelling, investment analytics and a Model Portfolio Service with over £11bn in assets under management.

Our technology removes unnecessary complexity, inefficiencies and anxiety for advisers, while improving long-term outcomes for their clients. Trust and security are fundamental to everything we build.

As a scaling Series B company, the only constant is change. We’re evolving our product, processes and teams as we grow. If you’re looking for a role where everything is already defined and static, this may not be the right fit.

However, if you’re excited by ownership, impact, and shaping the foundations of a growing company, read on.

Your responsibilities

You will be our first dedicated security hire, reporting directly to the CTO, with broad ownership of security across the company.

• Own and improve the company’s security posture across application, infrastructure and operations.
• Lead security engineering efforts, including threat modelling, vulnerability management, incident response and secure design reviews.
• Partner closely with engineering teams to embed security into development workflows and architecture decisions.
• Own compliance and risk management activities (e.g. ISO 27001 / GDPR), working with external auditors and consultants as needed.
• Define and execute a multi-year security roadmap aligned with business growth, regulatory needs and customer expectations.
• Act as the primary point of contact for security topics internally and externally (customers, partners, auditors).
• Educate and support teams on security best practices, policies and awareness.

What success looks like

• Security risks are identified early and addressed pragmatically without slowing delivery.
• Security is embedded into engineering workflows rather than bolted on afterwards.
• Compliance processes are predictable, well-run and low-stress for the wider team.
• Leadership has clear visibility into security posture, risks and priorities.
• A clear foundation is in place to scale the security function as the company grows.

Who we’re looking for

An experienced security engineer or DevSecOps professional who is excited to take ownership of security at a growing company and who has the ambition and capability to grow into a senior leadership role over time.

Absolute must haves:

• 5+ years experience in security engineering, application security, DevSecOps or similar roles.
• Strong hands-on technical background across cloud infrastructure, web applications and modern development practices.
• Experience working with security frameworks and compliance standards (e.g. ISO 27001, GDPR).
• Ability to balance pragmatism and rigour in a fast-moving product environment.
• Strong communication skills and confidence working cross-functionally.
• A self-starter mindset, comfortable operating with autonomy and ambiguity.

Nice to haves:

• Experience being the first or early security hire at a startup or scale-up.
• Exposure to board-level or executive security reporting.
• Experience hiring or mentoring other engineers.
• Interest in growing into a Head of Security or CISO role over time.

The package

• Competitive salary, dependent on experience and location
• Meaningful equity participation, reflecting the seniority and growth path of the role
• Participation in company bonus scheme (subject to company performance)
• 28 days annual leave plus statutory holidays
• Pension scheme (10% non-contributory after probation)
• Group life and income protection
• Cost of relevant professional qualifications and memberships
• Remote-first working (Europe or LATAM)
• Flexible hours (subject to team requirements)