Head of IT & Security

About Motorway

Motorway is the UK’s fastest-growing used car marketplace – our award winning, online-only platform connects private car sellers with over 7,500 verified dealers nationwide, who compete to offer the best price. Founded in 2017, our technology makes the process refreshingly easy, earning us an 'Excellent' Trustpilot rating with over 70,000 reviews. We're not just building a platform; we're changing how people sell cars.

Backed by leading investors like Index Ventures and ICONIQ Growth, and following a successful $190 million funding round, we're on a mission to transform the used car market.

About The Job

As Head of IT & Security, you are accountable for how Motorway manages technology risk, cyber security, and operational IT as the business scales. This is not a compliance-first or tool-driven role. It is a senior leadership role focused on reducing real business risk while enabling speed, productivity, and profitability.

You will own Motorway’s security posture end-to-end, spanning software and cloud risk, monitoring, and incident response, while also leading the core IT capabilities that underpin how teams work every day. This includes identity and access, internal platforms, service tooling, and the reliability of systems and tooling that support customer operations (across seller and dealer teams) and corporate functions.

You will work closely with Engineering, Product, Legal, Finance, People, and the executive team to make clear, proportionate decisions about risk, reliability, and investment, ensuring security and IT scale in step with the business. This role exists because Motorway is growing quickly, and security and operational IT must evolve without slowing the business down.

The Head of IT & Security reports directly to the Chief Operating Officer, James Wilson, reflecting the importance of security and IT as core business enablers at Motorway.

Responsibilities

This role is responsible for reducing technology and security risk while keeping Motorway fast, productive, and scalable. You will lead through influence, make explicit trade-offs, and ensure security and IT decisions are grounded in real business impact.

Security, Risk & Resilience

• Own Motorway’s security strategy and execution, acting as the accountable owner for cyber, fraud, and data risk
• Clearly articulate risk, impact, and trade-offs to senior leadership, prioritising effort where it materially reduces business impact
• Operate a unified incident response and resilience model, ensuring fast triage, clear ownership, effective communication, and continuous improvement through post-incident learning
  
  

Secure Engineering & Software Risk

• Partner closely with Engineering to embed security into development workflows
• Drive adoption of security tooling and patterns within pipelines, infrastructure templates, and application standards
• Ensure software and API security risks are understood, prioritised, and addressed in proportion to risk
  
  

Monitoring, Detection & Response

• Work closely with operational teams to improve tooling and workflows
• Ensure systems are well integrated, appropriately controlled, and resilient as the business scales
• Set clear expectations for access, data handling, and vendor assurance across operational systems
  
  

Leadership & collaboration

• Lead and develop a high-impact IT & Security team, setting clear priorities
• Build strong working relationships with Engineering, Product, Legal, Finance, and People to align security decisions with business goals
• Manage key security, IT, and operational tooling vendors, ensuring value is extracted from existing investments and risks are well understood
• Own and manage the IT & Security budget, making explicit trade-offs and maximising return on spend
  
  

Requirements

This role requires a senior leader who combines strong security and IT judgement with exceptional communication and influence. You should be comfortable operating in a fast-moving environment, making pragmatic decisions, and aligning diverse stakeholders around clear priorities and outcomes.

• Strategy: Ability to set and communicate a clear security and IT strategy aligned to business goals, translating risk, growth plans, and constraints into a prioritised roadmap over multiple horizons