About this role
Salary: £100,000 - 100,000 per year
Requirements
- Hands-on experience implementing and maturing CNAPP tooling such as Wiz
- Practical cloud security experience on at least one major hyperscaler, with a solid grasp of infrastructure, cloud and application security
- Track record of building assurance through continuous monitoring or automated evidence collection
- Experience running, auditing and developing ISO-based management systems, alongside broader governance, risk and compliance work
- Working knowledge of NIST frameworks
- Practical use of AI security and control frameworks such as the OWASP Top 10 for LLMs and MITRE ATLAS
- SC clearance or eligibility to obtain it
- Desirable: CISSP and/or CCSP certification
- Desirable: ISO 42001 implementation, audit or certification experience
- Desirable: Hands-on security testing of LLM applications or agentic AI systems
- Desirable: Python or other scripting used in a security context
- Desirable: Compliance-as-code or machine-readable compliance formats such as OSCAL
Responsibilities
- Help shape and deliver the overall security strategy and play a key part in building out the assurance function as the business grows
- Set security baselines for cloud, IT and product teams, and independently verify compliance against them
- Specify the evidence security testing needs to produce, and assure the processes and pipelines used to build the product
- Embed, integrate and continually improve security tooling across the full SDLC
- Independently test and verify platform-level AI controls, including prompt injection defences, agent permissions, provisioning guardrails and isolation, and own the baseline evidence pack
- Produce AI risk assessments and security posture reporting aligned to ISO 42001, the EU AI Act and the Cyber Resilience Act
- Support the running and upkeep of ISO 27001 and wider enterprise compliance management systems
- Champion good security practice across engineering teams
Technologies
- Agentic AI
- AI
- Cloud
- Support
- LLM
- OWASP
- Python
- Security
- DevOps
More
We are hiring for a permanent, full-time Security Assurance Lead role at a fast-growing UK sovereign AI scale-up, based hybrid in Belfast or London and reporting to the Security Lead. Our client builds a sovereign AI platform for organisations in defence, national security, central government, policing and other heavily regulated industries. Security is central to the business, and we are investing in a dedicated assurance function; this is one of its founding roles. The role spans the cloud estate, corporate environment and AI capability, with close collaboration across engineering, product, IT, commercial, leadership and customers.
We offer a competitive salary, pension, equity options and a working pattern that provides around 30 extra days a year on top of annual leave, including full four-day weeks over the summer and December, regular paid Fridays off and early Friday finishes. AI tools are part of everyday work, and our delivery-first culture values impact over optics and people over politics, with meaningful influence as the business grows.
last updated 43 week of 2026