What you'll be doing

Own the security strategy and roadmap across application, cloud, corporate, and AI security.
Build and lead the security team, hiring across AppSec, cloud, and GRC as the company grows.
Embed secure-by-design practices into engineering, including threat modelling, secure SDLC, and pentest and bug bounty programs.
Own compliance with ISO 27001, SOC 2, emerging AI standards such as ISO 42001, GDPR, and HIPAA readiness for healthcare customers.
Act as the security voice to enterprise customers through due diligence, executive briefings, and contractual security terms.
Lead incident response and report security risks to the executive team and board.
Set guardrails for AI usage including LLM risks, data handling, and vendor reviews.

Requirements

10+ years in security, including 3+ years leading the security function at a high-growth tech or SaaS company.
Strong technical expertise in at least one area: AppSec or cloud security (GCP preferred), with broad knowledge to lead across domains.
Proven track record delivering ISO 27001 and/or SOC 2 as the accountable owner.
Experience building and managing security teams from early stages.
Credibility with engineers, enterprise customers, and the board, with a pragmatic approach enabling speed over blocking.

Experience securing ML/AI platforms or data-intensive products.
Experience in regulated sectors such as healthcare, life sciences, or automotive.
Background as a hands-on engineer before transitioning into leadership.

Competitive salary and meaningful equity in a high-growth startup.
Strong in-person culture with most of the team working in the London office 4+ days per week.
25 days annual leave plus UK public holidays.
Annual learning and development budget.
Opportunity to travel for customer visits, events, and conferences across the UK and Europe.
Daily company lunches.
Monthly socials and bi-annual team offsites.