Head of Security

About the role

As Head of Security at Prezzee, you will protect the trust placed in the company by customers, partners and employees. Reporting to the CTO and sitting on the IT Leadership Team, you will shape and execute a security, privacy and compliance strategy that supports rapid growth while embedding a security‑first mindset across the organisation.

Key responsibilities

• Define and maintain a security roadmap aligned with Prezzee’s risk appetite, business priorities and growth plans.
• Elevate administrative, technical and procedural security controls throughout the business.
• Act as the Security Champion, driving security awareness and embedding security into product, engineering and IT processes.
• Lead, mentor and grow a small, high‑performing security team.
• Maintain and expand compliance with frameworks such as PCI DSS, ISO 27001, Cyber Essentials+, ISO 42001 and others.
• Chair the ISMS Committee, providing clear visibility of risks, controls and progress to stakeholders.
• Oversee vulnerability management, penetration testing and remediation within agreed SLAs.
• Coordinate incident prevention, detection and response, and regularly test cyber‑security response plans.
• Select, implement and manage core security tools including WAF, bot detection, PAM, code scanning and compliance platforms.
• Establish an AI security governance model and ensure AWS environments follow security best practices.

Required profile

• Proven experience leading security strategy and operations in a fast‑growing technology environment.
• Strong track record of building security‑first cultures and influencing cross‑functional teams.
• Experience managing compliance programmes and third‑party security due diligence.
• Hands‑on expertise in incident management, vulnerability remediation and security tool implementation.

Required skills

• Web Application Firewall (WAF)
• Bot detection solutions
• Privileged Access Management (PAM)
• Static and dynamic code scanning tools
• Compliance platforms for PCI DSS, ISO 27001, Cyber Essentials+, ISO 42001
• AWS security best practices
• Vulnerability management processes
• Penetration testing coordination and remediation
• AI security governance frameworks