Principal Security Programme Manager & Technical Lead - Engine by Starling

At Engine by Starling, we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses on our technology.

We are seeking a senior, highly adaptable Principal Security Programme Manager & Technical Lead to serve as a key technical partner to our Business Information Security Officer (BISO).

In this high-visibility role, you will help shape, refine, and execute our strategic security roadmap as we rapidly scale our global fintech ecosystem.

Responsibilities:

• Partner directly with the BISO to evaluate, refine, and drive the security roadmap, proactively proposing strategic updates to support rapid business growth.
• Lead core security projects, aligning initiatives across the CTO Office, engineering leads, SecOps, and threat/vulnerability management.
• Define and roll out practical security guardrails, risk assessments, and safe-use practices for AI/LLM adoption across engineering and business units.
• Ensure technical security controls natively satisfy key regulatory frameworks,including ISO 27001, ISO42001, SOC 1/2, PCI DSS & 3DS, CSA C-STAR, and DORA.
• Translate high-level security requirements into actionable, practical guidance for engineering teams without creating delivery bottlenecks.
• Drive critical technical work streams directly when needed, taking full ownership of project milestones from inception through to operational handover.

Requirements:

• Deep background in fintech security principles, regulatory demands, and scaling controls within fast-paced environments.
• Practical understanding of security considerations surrounding AI integration, data privacy, and model risk management.
• Hands-on experience mapping technical controls to ISO 27001, ISO42001, SOC 1/2, PCI DSS & 3DS, CSA C-STAR, and DORA.
• Strong project and programme management skills, with a proven track record of bringing complex security initiatives to completion.
• Strong technical foundation across SecOps, threat & vulnerability management, and secure engineering.

Benefits:

• 33 days holiday (including public holidays, which you can take when it works best for you)
• An extra day’s holiday for your birthday
• Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
• 16 hours paid volunteering time a year
• Salary sacrifice, company enhanced pension scheme
• Life insurance at 4x your salary & group income protection
• Private Medical Insurance with VitalityHealth including mental health support and cancer care.
• Partner benefits include discounts with Waitrose, Mr & Mrs Smith and Peloton
• Generous family-friendly policies
• Work from Abroad policy
• Incentives refer a friend scheme
• Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks