Director, Secure Engineering & AI Risk Management

GCS; England; On-site; GBP 120,000 - 180,000; Full time

Job summary

GCS is seeking a security leader to deliver a unified security engineering roadmap aligned with engineering leadership and to mature secure SDLC adoption across Web and Data Engineering.

You will strengthen detection, response and SOC partnerships while guiding data, AI and cloud security programs; mentor a team with clear ownership and KPIs, and shape a security culture that enables trusted software delivery.

Qualifications

• Strong Application Security expertise including OWASP, API Security, SAST, DAST and threat modelling.
• Hands-on understanding of data security, cloud data warehouses and pipeline integrity.
• Cloud security expertise including IAM, Kubernetes, containers and cloud-native tooling.
• Working knowledge of AI and LLM security risks, controls and governance.

Responsibilities

• Define and own the business' technical security strategy across products, data platforms and corporate estate.
• Lead Secure SDLC strategy including threat modelling, CI/CD security and vulnerability management.
• Partner with engineering leadership on software supply chain risk management.
• Own the strategic relationship with the outsourced 24/7 SOC.
• Build a culture where developers engage with security early and own remediation outcomes.
• Communicate risk effectively to technical and executive audiences.

Job description

GCS is seeking a security leader to deliver a unified security engineering roadmap aligned with engineering leadership and to mature secure SDLC adoption across Web and Data Engineering.

You will strengthen detection, response and SOC partnerships while guiding data, AI and cloud security programs; mentor a team with clear ownership and KPIs, and shape a security culture that enables trusted software delivery.