InfoSec Lead

About the Role

We are seeking an InfoSec Lead to build and lead DeployCo’s security function as we scale globally. You will own our security strategy and execution, protecting our people, systems and data while helping teams deliver secure AI solutions for enterprise customers.

This is a hands-on leadership role. You will establish the foundations of our security programme, build a high-performing team and partner closely with IT, Engineering, Delivery and Legal. You will be a trusted advisor to leadership and a credible counterpart to customer security teams, translating complex risks into clear decisions.

AI will be central to your remit. You will shape how we secure AI applications and agentic systems, govern our internal use of AI, and apply AI to improve our own security capabilities.

Success will mean a security function that earns customer confidence, gives teams practical ways to build securely and keeps pace with the company’s growth.

In this role, you will

• Build and own DeployCo’s security strategy, roadmap, budget and operating model, with clear priorities and accountability across the business.
• Establish core security capabilities across cloud infrastructure, identity and access, data protection, application security, vulnerability management, detection and incident response.
• Partner with Engineering and Delivery to embed security into the full lifecycle of customer deployments, from architecture and development through production operations.
• Partner with Product and Engineering to build application security into product design and development, define security requirements, review designs and prioritize fixes so products are secure at launch and as they evolve.
• Define security requirements and practical controls for AI applications, agents and internal AI adoption, covering approved tools, data handling, access permissions, third-party integrations and human oversight, while addressing risks such as prompt injection, sensitive data exposure and tool misuse.
• Use AI and automation to improve security operations, including alert triage, investigation, vulnerability prioritisation and evidence collection, with appropriate validation and controls.
• Lead security assurance and audit readiness, building towards relevant frameworks and certifications such as SOC 2 and ISO 27001 as customer and business needs require.
• Work with Legal and commercial teams on customer security reviews, contractual commitments, supplier risk and data protection requirements.
• Own incident preparedness and response, including exercises, escalation processes, recovery planning and clear communication during incidents.
• Support acquisitions, integrations, bringing teams and systems onto a consistent security baseline.
• Give executive leadership and the board clear visibility into material risks, programme maturity and investment decisions.
• Hire, develop and lead a strong security team, building a culture where security is understood and shared across the company.

You may thrive in this role if you

• Bring significant experience in information security, including senior leadership responsibility in a technology, enterprise software or services business.
• Have built or materially scaled a security function in a fast-growing organisation and know how to sequence investment as the business evolves.
• Combine strategic judgement with technical depth across cloud security, identity, application security and detection and response.
• Have practical experience securing AI-enabled applications or deployments, with a clear understanding of how models, retrieval systems, agents and tool integrations change the threat landscape.
• Have a considered view on where AI can improve security operations and where human judgement and verification remain essential.
• Have earned the trust of enterprise customers and can confidently discuss security architecture, assurance and risk with their technical and executive leaders.
• Have led significant incident response and can make clear, proportionate decisions under pressure.
• Can turn security requirements into controls and workflows that engineers and delivery teams can use effectively.
• Communicate clearly with executives and boards, connecting technical risks to customer trust, business priorities and investment choices.
• Enjoy building in ambiguity, taking ownership and staying close enough to the work to help solve difficult problems directly.