Security Practice Lead

Would you like to be responsible for defining the security practices that embed security by design throughout Kramp’s software development and implementation processes?

We are looking for a Security Practice Lead who will establish the security practices, principles and technical direction needed across Kramp’s entire technology landscape. You will determine which security practices, standards and capabilities are most relevant for Kramp and translate these into practical ways of working for Product Teams. You will support and guide Product Teams in implementing security best practices across internally developed applications, SaaS solutions, platform services, integrations, APIs, infrastructure components and third-party system implementations.

You will collaborate closely with the Security Team and Platform Teams to ensure security is embedded from the earliest possible stage.

Kramp Group is supported by a Product model organization consisting of a broad range of teams (around 30) focusing on business and technology. The teams work independently on improving their products and implementing systems, while together they are responsible for secure and reliable end-to-end business processes.

The Security Team and Platform Teams enable the Product Teams with principles, guidance, assessments, tooling and guardrails that support secure implementation, integration, operation and development of technology solutions.

The Security Practice Lead helps ensure these capabilities are consistently adopted and effectively used throughout the organization while continuously assessing whether they are the right capabilities for Kramp and identifying where the security practice needs to evolve.

You will report to the Head of Technology Platforms and work closely with the Security Team, Product Teams, Product Owners, Tech Leads, Developers, Solution Architects and other stakeholders. You will act as an important bridge between these stakeholders, providing operational guidance on security topics to teams while supporting and guiding Product Teams to turn that direction into practical ways of working.

Within the enterprise-wide security framework set by the Head of Security, the Security Practice Lead is accountable for defining and evolving Kramp’s Security Engineering and Security Architecture principles and embedding it across Product Teams.

• Security Engineering Vision and Principles. Define and continuously develop Kramp’s security Engineering vision by assessing current maturity, identifying gaps and defining the security practices and capabilities needed. Translate the vision into clear principles, standards and practical guidance for Product Teams.
• Security Guardrails and Tooling. Define and drive consistent adoption of security tooling and guardrails, including CI/CD controls, and ensure teams understand how to respond to security findings or blocked changes.
• Vulnerability Management. Ensure Product Teams act on findings from Sonar Qube, Dependabot, security scans and penetration tests. Improve coverage, ownership, and follow-up, and translate recurring findings into preventive controls. Escalate unresolved risks to the Security Team.
• Secure Ways of Working. Enable Product Teams through workshops and hands‑on guidance, strengthening security ownership and helping teams efficiently prioritise and address vulnerabilities.
• Security Reporting. Define meaningful security metrics and dashboards, communicate risks and trends, and drive action through transparent reporting to Product Teams and management.
• Security Architecture & Improvement. Collaborate with architects, Platform Teams and Product Teams to embed principles such as least privilege, data minimisation and resilience…