Lead Security Engineer - AI Security & Cloud Compliance

Encord; Greater London; Hybrid; GBP 110,000 - 160,000; Full time

Benefits offered by this job

London office 4+ days/week

25 days annual leave

Learning & development budget

Company lunches

Job summary

Encord is seeking a Lead Security Engineer to own and mature how we secure people, identities, devices, and the SaaS/AI tools we run the business on. You will build controls hands-on while owning the security programme across the company.

You’ll protect leadership from targeted attacks and partner with DevOps/Platform on cloud security, ISO 27001 and SOC 2 processes, and vendor risk assessments, helping Encord stay secure at scale.

Qualifications

• 7–8 years of hands-on security experience with a focus on organisational security.
• Experience rolling out SSO, MFA and conditional access across a company.
• Experience deploying MDM and EDR across macOS fleet.
• Proven ability to build automated joiner/mover/leaver processes and perform user access reviews.
• Experience running SaaS security, including shadow IT discovery and app permission reviews.
• Experience leading ISO 27001 and/or SOC 2 audits, including policies and auditor walkthroughs.
• Experience defending against targeted phishing and BEC.
• Experience coordinating third-party risk assessments and vendor reviews.
• Experience partnering with DevOps/Platform to secure cloud environments (GCP).
• Policy writing and runbook creation with clear communication.

Responsibilities

• Own identity and access across Encord, including SSO, MFA, conditional access, and joiner/mover/leaver.
• Manage device security for macOS fleet with MDM and EDR.
• Run SaaS and AI security: shadow IT discovery, app permissions reviews, and guardrails for AI tools.
• Protect executives and high-risk users from targeted phishing and BEC.
• Lead ISO 27001 and SOC 2 controls, from policies to auditor walkthroughs.
• Lead third-party and vendor risk assessments.
• Respond to and lead security incidents, and improve detection and response.
• Partner with DevOps/Platform to secure cloud environments.
• Write policies and runbooks; roll out changes with smooth employee experience.

Skills

Security experience

SSO rollout

MFA deployment

EDR management

MDM deployment

Joiner/mover/leaver flows

SaaS security

AI tool guardrails

ISO 27001 / SOC 2

Phishing defense

Security incidents

Vendor risk assessments

Cloud security (GCP)

Policy writing

Change management

Tools

Terraform

SIEM

CI/CD security

Vulnerability management tools

Penetration testing coordination

Job description

Encord is seeking a Lead Security Engineer to own and mature how we secure people, identities, devices, and the SaaS/AI tools we run the business on. You will build controls hands-on while owning the security programme across the company.

You’ll protect leadership from targeted attacks and partner with DevOps/Platform on cloud security, ISO 27001 and SOC 2 processes, and vendor risk assessments, helping Encord stay secure at scale.