AI Assurance Manager

Thales Group; Crawley; On-site; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Private medical insurance

Cycle to work scheme

Employee discounts

Annual bonus

Job summary

Thales invites applications for a security-focused role within the Enterprise AI Team in the UK. You will drive a strong AI security culture, embedding Secure by Design across development squads and guiding risk-based decisions to protect data and systems.

You will lead vulnerability management and define governance for security requirements, supporting UK stakeholders and ensuring timely accreditations in a rapidly evolving AI environment.

Qualifications

• Recognised security certifications (CISSP, CISM, CCSK) required or advantageous.
• Experience applying security principles in Agile environments.
• Ability to perform formal risk assessments and maintain RMADS.

Responsibilities

• Lead vulnerability management with Enterprise AI team and implement Secure by Design.
• Develop security requirements, epics and governance for data protection in products.
• Ensure data security and protection across new and existing data/digital products.
• Provide expert security advice across business units and maintain security risk registers.
• Support system accreditations and re-accreditations with security measures.

Skills

Security design

Risk assessment

Security governance

Stakeholder advisory

Education

CISSP

CISM

CCSK

Tools

Cloud technologies

Infrastructure as Code

Job description

You will be part of and responsible for driving a strong AI culture within the newly formed Enterprise AI Team. This will include leading the embedding best practice within the development teams (including 'Secure by Design' principles), contributing to use case development, developing AP tools, defining & supporting governance and taking a leading role in the AI assurance.,

• Lead vulnerability management activities working closely with the Enterprise AI team to initiate remedial action where required, utilising "Secure by Design" Principles.
• Develop security requirements, epics and stories, along with guidance & governance to squads to ensure data protection and data security are included in the scope of new and existing data & digital products
• Work collaboratively with other team member to ensure proposed solutions provide the required level of security assurance in line with data processing requirements, as well as Thales and customer risk appetites.
• Embedding the latest security best practice within the development team enabling the principle of 'everyone being responsible for security'.
• Support the delivery of technical security measures, to ensure successful and timely system accreditations and re-accreditations.
• Be central point of contact for all UK Digital Competency Centre technical security matters and concerns, supporting Enterprise AI team throughout the development lifecycle and engaging with key security stakeholders inc. UK Head of Information Assurance.
• Responsibility for developing, implementing and conducting formal and regular technical risk assessments of Thales' DCC environment, recommending remedial action where required, utilising "Secure by Design" Principles.
• Assist with the deployment and implementation of security related initiatives Extensive and proven experience in providing technical security support across a diverse range of systems and applications.
• Capability to analyze and advise on security implications for both new and existing systems/applications, including all proposed changes.
• Proficient in interpreting detailed system design documentation to identify potential security risks and devise effective mitigation strategies for secure and compliant solutions.
• Commitment to ensuring security activities align with compliance requirements, enabling Security Architecture and Services to manage risk while maximizing business value.
• Strong verbal and written communication skills with the ability to convey complex technical security concepts clearly to management, clients, and team members at all levels.

Desirable Skills

• Measurable experience covering fundamental security technical design principles.
• Experience conducting formal risk assessments and preparing Risk Management and Accreditation Documentation (RMADS) in compliance with UK Government policies.
• Proven track record in delivering technical security support for a variety of systems and applications.
• Experience acting as a formal stakeholder in security-related change control processes.
• Familiarity with security frameworks such as Cyber Essentials Plus, ISO27000 series, NIST-800 (including SP800-37 and SP800-53), and associated assurance activities.

Essential Experience

• Possession of recognized security certifications such as CISSP, CISM, CCSK, or equivalent.
• Demonstrated understanding of cloud technologies and Infrastructure as Code (IaC).
• Proven application of security principles within Agile delivery frameworks.
• Experience assessing and managing technical security risks effectively.
• Ability to provide expert technical security advice to various business units and contribute to maintaining security risk registers.
• Up-to-date knowledge of current and emerging security technologies.
• Experience in reviewing and updating security policies and procedures. Thales is a global technology leader with more than 83,000 employees on five continents. With over 7,500 people in the UK, operating across defence, space, aerospace, and digital security, we help build a future we can all trust. Thales supports the security and stability of our nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services., Due to the nature of the work that we do at Thales, many of our roles are subject to security restrictions. This role requires Security Clearance (SC). It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant undergo, achieve, and maintain SC Clearance prior to commencing employment.

To be eligible for full SC, you generally need to have resided in the UK for the last 5 years. In some circumstances, a minimum of 3 years' residence in the UK over the last 5 years may be accepted, with additional overseas checks. Please visit the UKSV website for further guidance: https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels/national-security-vetting-clearance-levels. At Thales, we ensure equal opportunities, pay and working conditions for all. The benefits we offer include private medical insurance, buying or selling annual leave, cycle to work schemes, employee discounts, paid volunteering day, stocks and shares, annual bonus and much more depending on the role. We are committed to creating a workplace where everyone feels valued for who they are and the unique strengths they bring.