Cyber Security Lead

Oscar Technology; Greater London; On-site; GBP 115,000 - 135,000; Full time

Job summary

Oscar Technology is recruiting a Cyber Security Lead in London to own product, cloud and security assurance within a confidential, multi‑tenant SaaS environment.

You will lead secure development practices across the full lifecycle, secure AWS environments, manage identity and incident response, and drive SOC 2 and ISO 27001 programmes while collaborating with engineering and leadership. Strong communication with engineers and external stakeholders is essential.

Qualifications

• 7+ years of cyber security or security engineering experience.
• Hands-on security across cloud-native SaaS platforms, preferably AWS.
• Experience delivering SOC 2 and/or ISO 27001 programmes.
• Security controls around identity, tenant isolation and incident response.
• Strong collaboration with engineers and leadership.

Responsibilities

• Lead product and application security across the development lifecycle.
• Secure AWS environments, including IAM, network segmentation, encryption and monitoring.
• Own security controls around identity, permissions, tenant isolation and audit trails.
• Lead security assurance activities for SOC 2 and ISO 27001.
• Support enterprise security reviews and due diligence with customers.

Skills

Threat modelling

Secure code review

Vulnerability management

CI/CD security controls

AWS security

SOC 2

ISO 27001

Communication

Tools

Kubernetes

CI/CD tooling

Job description

Cyber Security Lead £115,000 - £135,000 London

Our client is a growing technology business developing an enterprise AI platform for the financial services market. They're looking for a Cyber Security Lead to take ownership of product, cloud and security assurance within a highly confidential, multi-tenant SaaS environment.

Key Responsibilities:

• Lead product and application security across the development lifecycle, including threat modelling, secure code review, vulnerability management and CI/CD security controls
• Work closely with engineering and cloud teams to secure AWS environments, including IAM, network segmentation, encryption, logging and monitoring
• Own security controls around identity, permissions, tenant isolation, audit trails and incident response
• Lead security assurance activity covering SOC 2, ISO 27001 and wider customer security requirements
• Support enterprise customer security reviews, questionnaires and due diligence while helping shape security standards across the organisation

Required Experience:

• 7+ years' experience in cyber security or security engineering
• Strong experience securing cloud-native SaaS platforms, ideally within AWS environments
• Hands-on application security experience across threat modelling, OWASP and secure software development
• Good understanding of cloud security, identity, access controls, encryption and monitoring
• Experience delivering or implementing SOC 2 and/or ISO 27001 programmes
• Experience supporting enterprise security reviews, questionnaires, audits or customer due diligence
• Strong communication skills with the ability to work effectively with engineers, leadership and external stakeholders

Desirable:

• Experience securing AI, LLM or agentic applications
• Knowledge of ISO 42001, EU AI Act or AI security risks
• Financial services or other regulated industry experience
• Experience with Kubernetes, infrastructure as code or wider cloud-native technologies