Senior Application Security Manager
Role Summary
Join Pleo as a Senior Application Security Manager, leading vulnerability management and shaping the security strategy in a collaborative cyber team.
About the Organisation
Messy spend management is tricky business. And tedious processes are a lose-lose situation for all involved, not just finance. At Pleo, we're changing that. We build spend solutions that make managing money seamless, empowering, and surprisingly effective for finance teams and employees alike - with a vision to help all businesses ‘go beyond’.
The word ‘Pleo’ actually means ‘more than you’d expect’, and living by that mantra has been the secret to our success over the last 10 years.
Now, we’re at a pivotal moment in our journey; every move we make has a direct impact on our 40,000+ customers, our business, and our collective success. We need people who take pride in uncovering customer needs, who turn complex problems into simple solutions, challenge the way things are done (respectfully), and always aim high. With great ambitions driving us forward, we can’t say we’ve got this whole thing figured out. And frankly, that’s half the fun! What we can say is that we’re a driven, progressive, and, importantly, a kind bunch of 850+ people from over 100 nationalities, all committed to delivering the future of business spending, together.
We're looking for a Senior Application Security Manager to join our Cybersecurity team at Pleo. In this role, you'll own vulnerability management and set the long-term application security strategy, turning a growing stream of signal into a risk-ranked plan the engineering organisation can actually act on. If you're a player-coach who wants high leverage with low bureaucracy, and you'd rather mature a program than maintain one, then this is the opportunity for you!
This role is a good fit for you if:
This role is not a good fit for you if:
Find more English Speaking Jobs in United Kingdom on Arbeitnow
- You want a fast, visible impact on a program with real room to improve, without having to fight for basic tooling and process first.
- You treat developers as customers and get satisfaction from security becoming an enabler rather than a blocker.
- You like being a player-coach, staying close to the technical work while growing the people around you.
- You're motivated by high leverage and low bureaucracy, and you'd rather build the system than personally do every task.
- You're looking to step away from technical work entirely at this level.
- You prefer to lead through mandate and process rather than partnership and example.
- You're sceptical of automation, AI, or of leaning on signal from partner teams.
- English first. Since it's our company language, please submit your application in English. You’ll be using it a lot if you join us.
- A fair look for everyone. Our talent team reads every single application to ensure the process is fair. To keep things running smoothly, we only accept applications through our system—our support team can’t pass on calls or emails.
- Diversity drives us. We can only reach our goals if our team reflects the world around us. That starts with you hitting apply, even if you don't tick every single box. We encourage people from all backgrounds and experiences to join us.
- Interview at your best. We want you to feel comfortable throughout the process. If you have any accessibility requirements or need a specific format, email ----- We’ll design a process that works for you.
- Your data is safe. When you apply, we process your personal data as a data processor. For more information on how Pleo processes personal data, read our Privacy Policy here.
- Applying for multiple roles? Nothing is stopping you, and we assess every role independently. However, we do look for alignment, so make sure you can explain why your interest and experience are right for each specific role.
- Reapplying. If you’re applying for the same role again, please wait six months from your last decision before hitting submit.
Minimum Requirements
You'll thrive in this role if you have:
- 10+ years of experience steering application security and wider information security strategy in a compliance-heavy environment.
- A background as a senior security engineer who moved into management, with enough technical depth that you're still credible and still hands-on.
- A track record of mentoring and growing engineers, and of keeping a team accountable without micromanaging it.
- Demonstrated experience turning signal into prioritised action through risk-based triage.
- Experience using AI and automation to scale security coverage, rather than solving everything through headcount or process.
- The ability to shape culture outside your own team, influencing engineering squads without formal authority over them.
- Comfort in a fast-moving, complex, ever-evolving environment, where you're self-directed and proactive.
- Exposure to fintech compliance requirements is a strong advantage. Backgrounds we also look at include DevSecOps and platform security leads with real AppSec depth.
Working Conditions
- Your own Pleo card (no more out-of-pocket spending!)
- Lunch is on us for your work days - enjoy catered meals or receive a lunch allowance based on your local office
- Comprehensive private healthcare - depending on your location, coverage options include Vitality, Alan or Médis
- We offer 25-28 days of holiday (depending on your location) + public holidays
- For our Team, we offer both hybrid and fully remote working options
- Option to purchase 5 additional days of holiday through a salary sacrifice
- We use MyndUp to give our employees access to free mental health and well-being support with great success so far
- Paid parental leave - we want to make sure that we're supportive of families and help you feel that you don't have to compromise your family due to work
Eligibility Criteria
Eligible applicants should have experience in application security and leadership within cybersecurity frameworks.
⚠️ Disclaimer: PathwayAI Africa does not guarantee employment, scholarships, visas, or admission. Always verify all opportunities through official sources before submitting personal information.
Check if You Qualify
Upload your CV to compare it against this specific opportunity. You can still apply even if improvements are recommended.