Principal Security Programme Manager & Technical Lead - Engine by Starling

Overview

In this senior technical leadership role, you partner with the BISO to shape and drive the security roadmap as Engine rapidly scales a global fintech ecosystem. You bridge executive security vision with practical delivery, guiding core initiatives across engineering, SecOps, threat management, and CTO Office. You’ll lead AI security readiness and ensure compliance with key financial standards while delivering tangible security controls. This role blends strategy and hands-on delivery to enable secure, innovative growth.

Pay / Benefits

• 33 days holiday
• An extra day’s holiday for your birthday
• Private Medical Insurance with VitalityHealth
• Life insurance at 4x salary & group income protection
• Cycle to Work and EV leasing initiatives
• Pension scheme

• Partner with the BISO to refine and execute the security roadmap for rapid growth
• Lead cross-functional security projects across CTO Office, engineering, SecOps, and threat/vulnerability management
• Define and roll out AI/LLM security guardrails and risk assessments across engineering and business units
• Ensure technical controls satisfy ISO 27001, ISO42001, SOC 1/2, PCI DSS & 3DS, CSA C-STAR, and DORA
• Translate high-level security requirements into practical guidance for engineering teams
• Own critical technical work streams and milestones from inception to operational handover

• Fintech security principles in fast-paced environments
• AI security, data privacy, and model risk management familiarity
• Hands-on experience mapping controls to ISO 27001, ISO42001, SOC 1/2, PCI DSS & 3DS, CSA C-STAR, DORA
• Strong programme management with track record of delivering complex security initiatives
• Solid technical breadth across SecOps, threat & vulnerability management, and secure engineering

• Influence & autonomy
• Strategic & operational flexibility
• Pragmatic problem-solving
• AI security and innovation leadership
• Cloud security architectures
• Compliance framework mapping (ISO 27001, ISO42001, SOC 1/2, PCI DSS & 3DS, CSA C-STAR, DORA)