Cyber Security Manager – AWS, ISO 27001

• Manage ongoing cybersecurity commitments, delivering operational security controls, risk and governance frameworks, and Information Security standards
• Deliver the InfoSec technology roadmap while ensuring regulatory obligations are met
• Shape the Cyber Security strategy, including the secure adoption of AI across the business
• Run vulnerability and patch management programmes, using AI agents to triage findings, assess exploitability and draft remediation
• Design and continuously improve AI-driven security workflows, including alert triage, automated compliance evidence collection and third-party risk assessment
• Identify emerging threats through AI-driven threat intelligence, ensuring security data is continuously collected, correlated and analysed
• Define security KPIs and automate management reporting, escalations and metric analysis with AI
• Build and maintain security policies and procedures, using AI to draft content and map controls against frameworks
• Prepare the platform for go-live, with security support processes integrated into the wider group
• Act as the Cyber Security SME for stakeholders and promote a culture of continuous improvement
• Work across technology and Financial Services teams during the staged go-live of the fintech platform

• Proven experience in Cyber Security / Information Security
• Hands-on experience using AI tools and agents (e.g. Claude, Microsoft Security Copilot or similar) for threat analysis, vulnerability triage, policy drafting, reporting and automation
• Strong working knowledge of AWS security services: Security Hub, Control Tower, Organizations, SCPs, IAM, account security, Macie and GuardDuty
• Strong understanding of compliance requirements: DPA, GDPR, PCI DSS v4.0, SOC 1, SOC 2 and ISO/IEC 27001
• Knowledge of OWASP Top 10 for LLM Applications (2025) and ISO/IEC 42001
• Strong understanding of AI security risks, including prompt injection, data leakage and model misuse
• Good awareness of current threats, emerging vulnerabilities and zero-day exploits, and how to mitigate them
• Solid grasp of security risk assessment methodologies: identifying, assessing, prioritising and managing risk
• Experience managing third-party suppliers and vendor risk, including assessment of AI tools and vendors
• Experience developing security policies, procedures, governance frameworks and strategies
• Ability to troubleshoot security incidents and design effective risk mitigation
• Strong stakeholder management and communication skills, with the ability to explain complex security topics to technical and non-technical audiences
• Comfortable in an agile, fast-moving start-up environment, with a curious, decisive and delivery-focused approach
• Fluent English (written and spoken), essential for daily work with UK-based stakeholders
• Background in fintech, financial services or another regulated environment (Preferred)
• CISSP or OSCP certification (Preferred)

• 15th month salary
• Health insurance covering your family
• Birthday off
• Mobility program for digital nomads
• Real work-life balance