Head of InfoSec & AI Security Strategy

Waracle; City of Edinburgh; Hybrid; GBP 90,000 - 150,000; Full time

Benefits offered by this job

Hybrid working

Home office budget

Udemy Business

Learning & development budget

Pension 5% matched

Death in Service 2x salary

Medicash Health Cash Plans

Employee Assistance Programme

Group Sickness Cover

Cycle to Work Scheme

Gym and retail discounts

Monthly lunch on us

Spirit of Waracle volunteering

Job summary

Waracle is seeking a Head of InfoSec to shape our security landscape across a world-class digital technology consultancy. The role is hybrid and based in Scotland, with options in Dundee, Edinburgh, or Glasgow.

You will lead security testing, AI tooling ownership, audits and incident response while enabling business growth through secure technology solutions. You will collaborate with cross-functional partners to ensure continuous compliance with Cyber Essentials Plus and ISO 27001 and drive

Qualifications

• Information Security and IT infrastructure experience.
• AI governance, SaaS vendor management and API usage controls.
• Experience preparing for technical audits and working with Cyber Essentials Plus and ISO 27001.
• Strong communication skills with clients, sales teams and engineers.

Responsibilities

• Drive internal security testing and education, including phishing simulations and vulnerability remediation.
• Own commercial and security lifecycle of internal AI tools, monitor consumption and costs.
• Advise on AI adoption, evaluate use cases and establish safe-use guidelines.
• Lead technical audit preparations and continuous evidence gathering for Cyber Essentials Plus and ISO 27001.
• Act as lead responder during cybersecurity incidents, guide containment and reporting.
• Advise on client security questionnaires and showcase cyber and AI security posture to partners.

Skills

Hybrid security

AI governance

Cyber compliance

Communication skills

Incident response

Enablement mindset

Job description

Waracle is seeking a Head of InfoSec to shape our security landscape across a world-class digital technology consultancy. The role is hybrid and based in Scotland, with options in Dundee, Edinburgh, or Glasgow.

You will lead security testing, AI tooling ownership, audits and incident response while enabling business growth through secure technology solutions. You will collaborate with cross-functional partners to ensure continuous compliance with Cyber Essentials Plus and ISO 27001 and drive