Strategic AI Security & Governance Leader

Fruition Group; Leeds; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Fruition Group in Leeds is seeking a Principal Consultant to lead AI security and governance initiatives. You will bridge AI, security, governance, and engineering, enabling safe production while enabling rapid delivery for clients.

Role involves advising boards, designing practical governance frameworks, and guiding firms through EU AI Act, UK GDPR, and NIST RMF requirements, with hands-on threat modelling and risk assessment.

Qualifications

• Experience across security, risk, data, GRC or a related field.
• Strong client-facing consulting background with governance design experience.
• Practical understanding of how AI systems are built and secured.
• Good understanding of LLMs and agentic AI, including RAG, tool use and orchestration.
• Knowledge of EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001.

Responsibilities

• Advise boards, audit and risk committees on AI risk and governance.
• Design and implement practical AI governance frameworks, policies and controls.
• Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements.
• Threat-model GenAI and agentic AI systems.
• Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation.
• Lead client workshops and contribute to proposals and pre-sales.

Skills

AI risk governance

Consulting experience

Governance frameworks

Regulatory knowledge

Communication with execs

Security & risk assessment

Threat modelling

Tools

OneTrust

Purview

Varonis

BigID

Credo AI

Job description

Fruition Group in Leeds is seeking a Principal Consultant to lead AI security and governance initiatives. You will bridge AI, security, governance, and engineering, enabling safe production while enabling rapid delivery for clients.

Role involves advising boards, designing practical governance frameworks, and guiding firms through EU AI Act, UK GDPR, and NIST RMF requirements, with hands-on threat modelling and risk assessment.