AI Assurance Manager

Thales; Crawley; Hybrid; GBP 75,000 - 120,000; Full time

Job summary

Thales is seeking an AI Assurance Manager in Crawley with strong security leadership to embed secure development practices and governance across the Enterprise AI Team. The role focuses on risk assessment, data protection, and security accreditation support throughout the lifecycle.

The ideal candidate has CISSP/CISM/CCSK and extensive cloud security experience, capable of guiding multiple squads and engaging with senior security stakeholders in the UK.

Qualifications

• Proven experience providing security support across diverse systems and apps.
• Ability to analyse security implications for new and existing systems.
• Experience interpreting designs to identify risks and mitigation strategies.
• Strong communication to management, clients and teams.

Responsibilities

• Lead vulnerability management with the Enterprise AI team and apply Secure by Design principles.
• Develop security requirements, epics and governance for data protection and security.
• Collaborate to ensure solutions meet data processing and risk appetites.
• Embed security best practices within development teams and lifecycle.
• Support technical security measures for system accreditations and re-accreditations.
• Act as UK Digital Competency Centre security lead and liaise with security stakeholders.
• Conduct formal technical risk assessments of Thales' DCC environment and remedial actions.

Skills

Technical security support

Security risk analysis

Security architecture

Clear communication

Education

CISSP

CISM

CCSK

Tools

Infrastructure as Code (IaC)

Cloud security

Job description

Location: Crawley, United Kingdom

AI Assurance Manager

Crawley - Hybrid

You will be part of and responsible for driving a strong AI culture within the newly formed Enterprise AI Team. This will include leading the embedding best practice within the development teams (including ‘Secure by Design’ principles), contributing to use case development, developing AP tools, defining & supporting governance and taking a leading role in the AI assurance.

Key Responsibilities

• Lead vulnerability management activities working closely with the Enterprise AI team to initiate remedial action where required, utilising “Secure by Design” Principles.
• Develop security requirements, epics and stories, along with guidance & governance to squads to ensure data protection and data security are included in the scope of new and existing data & digital products
• Work collaboratively with other team member to ensure proposed solutions provide the required level of security assurance in line with data processing requirements, as well as Thales and customer risk appetites.
• Embedding the latest security best practice within the development team enabling the principle of ‘everyone being responsible for security’.
• Support the delivery of technical security measures, to ensure successful and timely system accreditations and re-accreditations.
• Be central point of contact for all UK Digital Competency Centre technical security matters and concerns, supporting Enterprise AI team throughout the development lifecycle and engaging with key security stakeholders inc. UK Head of Information Assurance.
• Responsibility for developing, implementing and conducting formal and regular technical risk assessments of Thales’ DCC environment, recommending remedial action where required, utilising “Secure by Design” Principles.
• Assist with the deployment and implementation of security related initiatives.

Essential Skills

• Extensive and proven experience in providing technical security support across a diverse range of systems and applications.
• Capability to analyze and advise on security implications for both new and existing systems/applications, including all proposed changes.
• Proficient in interpreting detailed system design documentation to identify potential security risks and devise effective mitigation strategies for secure and compliant solutions.
• Commitment to ensuring security activities align with compliance requirements, enabling Security Architecture and Services to manage risk while maximizing business value.
• Strong verbal and written communication skills with the ability to convey complex technical security concepts clearly to management, clients, and team members at all levels.

Desirable Skills

• Measurable experience covering fundamental security technical design principles.
• Experience conducting formal risk assessments and preparing Risk Management and Accreditation Documentation (RMADS) in compliance with UK Government policies.
• Proven track record in delivering technical security support for a variety of systems and applications.
• Experience acting as a formal stakeholder in security-related change control processes.
• Familiarity with security frameworks such as Cyber Essentials Plus, ISO27000 series, NIST-800 (including SP800-37 and SP800-53), and associated assurance activities.

Essential Experience

• Possession of recognized security certifications such as CISSP, CISM, CCSK, or equivalent.
• Demonstrated understanding of cloud technologies and Infrastructure as Code (IaC).
• Proven application of security principles within Agile delivery frameworks.
• Experience assessing and managing technical security risks effectively.
• Ability to provide expert technical security advice to various business units and contribute to maintaining security risk registers.
• Up-to-date knowledge of current and emerging security technologies.
• Experience in reviewing and updating security policies and procedures.

Security Clearance Requirement

Due to the nature of the work that we do at Thales, many of our roles are subject to security restrictions. This role requires Security Clearance (SC). It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant undergo, achieve, and maintain SC Clearance prior to commencing employment.

Please visit the UKSV website for further guidance: https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels/national-security-vetting-clearance-levels.

At Thales, we ensure equal opportunities, pay and working conditions for all. The benefits we offer include private medical insurance, buying or selling annual leave, cycle to work schemes, employee discounts, paid volunteering day, stocks and shares, annual bonus and much more depending on the role. Read more about our benefits here.

We are committed to creating a workplace where everyone feels valued for who they are and the unique strengths they bring. Discover more about our programmes, employee networks, wellbeing policies, and inclusive features here.