# Principal Security Programme Manager & Technical Lead - Engine by Starling

**Company**: Engine by Starling
**Location**: London, England
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: Full-time
**Category**: IT
**Industry**: Finance

**Apply**: https://apply.workable.com/j/05D7BED949?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_062c50a6-886

## Description

At Engine by Starling, we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses on our technology.

We are seeking a senior, highly adaptable Principal Security Programme Manager & Technical Lead to serve as a key technical partner to our Business Information Security Officer (BISO).

In this high-visibility role, you will help shape, refine, and execute our strategic security roadmap as we rapidly scale our global fintech ecosystem.

Responsibilities:

- Partner directly with the BISO to evaluate, refine, and drive the security roadmap, proactively proposing strategic updates to support rapid business growth.

- Lead core security projects, aligning initiatives across the CTO Office, engineering leads, SecOps, and threat/vulnerability management.

- Define and roll out practical security guardrails, risk assessments, and safe-use practices for AI/LLM adoption across engineering and business units.

- Ensure technical security controls natively satisfy key regulatory frameworks,including ISO 27001, ISO42001, SOC 1/2, PCI DSS & 3DS, CSA C-STAR, and DORA.

- Translate high-level security requirements into actionable, practical guidance for engineering teams without creating delivery bottlenecks.

- Drive critical technical work streams directly when needed, taking full ownership of project milestones from inception through to operational handover.

Requirements:

- Deep background in fintech security principles, regulatory demands, and scaling controls within fast-paced environments.

- Practical understanding of security considerations surrounding AI integration, data privacy, and model risk management.

- Hands-on experience mapping technical controls to ISO 27001, ISO42001, SOC 1/2, PCI DSS & 3DS, CSA C-STAR, and DORA.

- Strong project and programme management skills, with a proven track record of bringing complex security initiatives to completion.

- Strong technical foundation across SecOps, threat & vulnerability management, and secure engineering.

Benefits:

- 33 days holiday (including public holidays, which you can take when it works best for you)

- An extra day’s holiday for your birthday

- Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off

- 16 hours paid volunteering time a year

- Salary sacrifice, company enhanced pension scheme

- Life insurance at 4x your salary & group income protection

- Private Medical Insurance with VitalityHealth including mental health support and cancer care.

- Partner benefits include discounts with Waitrose, Mr & Mrs Smith and Peloton

- Generous family-friendly policies

- Work from Abroad policy

- Incentives refer a friend scheme

- Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks

## Skills

### Required
- fintech security
- regulatory compliance
- AI security
- programme management
- technical leadership

### Nice to have
- cloud security architectures
- industry certifications in security, privacy, or compliance

---

Source: [Apply at apply.workable.com](https://apply.workable.com/j/05D7BED949?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)