Senior Director - DevOps Security

Job Description This is a high-impact global leadership role at the intersection of cyber security, product engineering, cloud operations, enterprise technology and AI-enabled software development. You will lead Sage’s largest technical security function, with a global team protecting a broad portfolio of products and services. Your mandate is to build one connected, high-performing DevOps Security function, strengthen how security is embedded throughout the software lifecycle, and help Product, Engineering and Enterprise IT turn security priorities into action. Why this role stands out - Lead and shape a global DevOps Security function. - Shape security for AI-enabled development and the next generation of Sage products. - Influence major Product, Engineering and Enterprise IT decisions. - Build a consistent, scalable security capability across Sage’s technology landscape. Key Responsibilities What you'll do - Unify and lead the function: Build one global DevOps Security function around shared priorities, clear accountability, consistent ways of working and a strong delivery rhythm. - Set direction and drive execution: Lead the DevOps Security roadmap and ensure global initiatives improve Sage’s security position at pace and with measurable impact. - Partner across Product Engineering, Cloud Platform Operations and Enterprise IT: Build trusted relationships across these organisations to embed security into technology delivery, remove blockers and ensure vulnerabilities and security risks are addressed effectively. - Embed security into how software is built: Advance agile and DevSecOps practices across an AI-enabled software development lifecycle, using automation and orchestration to create scalable solutions. - Strengthen security across Sage’s internal technology environment: Work with Enterprise IT and Cloud Platform Operations to improve security across internal platforms, infrastructure and services, ensuring the function protects both Sage’s products and the technology used to run the business. - Provide technical judgement: Act as a credible sounding board on application, product, cloud and enterprise technology security, architecture reviews, threat assessment and complex cyber incidents. This is a leadership role, not a hands-on coding position. - Shape emerging security priorities: Help Sage respond to the opportunities and risks created by AI, including AI in products, partner ecosystems, colleague use and AI-assisted software development. - Influence strategic decisions: Advise senior leaders on cyber security and contribute to initial security and architecture assessments for potential acquisitions. - Build for the future: Identify areas for investment, risk reduction, architectural improvement and greater efficiency. What success looks like - DevOps Security operates as one high-performing global function, with clear priorities, accountability and consistent ways of working. - Security is consistently embedded across Product Engineering roadmaps, the software development lifecycle, cloud operations and Sage’s internal technology environment. - Global security programmes are delivered with stronger pace, quality and measurable business impact. - Vulnerabilities and security risks are communicated clearly and addressed within agreed service levels. - The team is engaged, well led and connected across regions and time zones. What you'll bring - Proven people leadership in a complex technology environment, with the judgement and resilience that come from leading technical teams through change. - Experience working with globally distributed, diverse and multicultural teams. Experience leading managers is valuable, but strong cross-functional influence and leadership are equally important. - Strong knowledge of application, product, software, cloud or enterprise technology security, including how security is embedded across the software development lifecycle, DevOps practices and cloud-based services. - Enough technical depth to challenge, guide and unblock specialists, without needing to be the person writing code or designing every solution. - A track record of building or bringing together functions, improving ways of working and delivering technology or security transformation. - Excellent communication and influencing skills, with the ability to move confidently between technical discussions and clear updates for senior leaders. - Curiosity about emerging security trends, particularly the practical impact of AI on software development and cyber security. - Willingness to travel to build strong relationships with teams and stakeholders across Sage. Industry background: You do not need to come directly from a software company, but you must have worked in an organisation with meaningful software development capability and understand security in products, services and internal technology environments. No specific coding language or security certification is required. Benefits? We have plenty… -  Generous bonuses and pension scheme -  25 days of paid annual leave with the option to buy up to another 5 days -  8 bank holiday days -  Paid 5 days yearly to volunteer through our Sage Foundation -  50% income protection -  Holiday buy + sell -  Comprehensive health, dental, and vision coverage -  Work away scheme for up to 10 weeks a year -  Ongoing training and professional development -  Hybrid working -  Healthy Mind app membership -  Access to various helpful memberships for finances, health and wellbeing