Senior Security Engineer - IAM, Cloud & ISO 27001 Leader

Crane Venture Partners; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Commission & equity

London office 4+ days/week

25 days annual leave + UK holidays

Learning & development budget

UK/Europe travel for events

Company lunches twice a week

Monthly socials & bi-annual offsites

Job summary

Encord, a universal data layer for AI, is seeking a Lead Security Engineer to own and mature the security program across people, identities, devices, and cloud tools. You will be hands-on and also guide the security curriculum for the whole company.

You will protect leadership from targeted attacks, drive ISO 27001 and SOC 2 compliance, and collaborate with DevOps to secure a GCP-based environment. If you thrive in fast-moving startups with a strong security impact, this role is for you.

Qualifications

• 7–8 years of hands-on security experience focused on enterprise security.
• Experience rolling out SSO, MFA, and conditional access at scale.
• Experience deploying MDM and EDR across macOS fleets.
• Strong history building joiner/mover/leaver workflows and access reviews.
• Experience in SaaS security: shadow IT, app permissions, tool adoption.
• Experience with ISO 27001 and/or SOC 2 audits, including evidence.
• Experience defending against phishing and BEC attacks.

Responsibilities

• Own identity and access across Encord (SSO, MFA, CA).
• Manage device security for macOS fleet (MDM/EDR).
• Secure SaaS/AI tools, guardrails for usage.

Skills

SSO & MFA rollout

MDM & EDR management

ISO 27001 / SOC 2 audits

Cloud security (GCP)

Incident response

Third-party risk assessments

Policy writing

Phishing/BEC defense

Tools

Terraform

SIEM

MDM

EDR

CSPM

IAM

Job description

Encord, a universal data layer for AI, is seeking a Lead Security Engineer to own and mature the security program across people, identities, devices, and cloud tools. You will be hands-on and also guide the security curriculum for the whole company.

You will protect leadership from targeted attacks, drive ISO 27001 and SOC 2 compliance, and collaborate with DevOps to secure a GCP-based environment. If you thrive in fast-moving startups with a strong security impact, this role is for you.