IT and Security Lead – London, United Kingdom

Holistic AI Inc; London; On-site; NOK 1,133,000 - 1,637,000; Full time

Job summary

Holistic AI Inc. is seeking a seniorIT security and platform owner to drive the security posture across the company’s systems and product platform. You will shape architecture with a security-first lens and implement practical controls.

In this hands-on leadership role, you will support enterprise customers, respond to RFPs and InfoSec questionnaires, and partner with Engineering to ensure secure design, incident readiness and governance. London-based, on-site position.

Qualifications

• 7+ years of experience in IT security, security engineering, or platform ownership.
• Working knowledge of cloud security, IAM, and secure architecture fundamentals.
• Experience supporting enterprise customer security requirements, including RFPs and InfoSec questionnaires.
• Clear communication with customers and able to explain security concepts to technical and non-technical audiences.

Responsibilities

• Own and advance IT and security posture across company systems and product platform.
• Contribute to platform architecture decisions with a security-first lens.
• Establish and maintain security controls, access management and operational hygiene.
• Support enterprise customer and audit expectations on security, including processes and evidence required.
• Partner with Engineering on secure design, vulnerability management and incident readiness.
• Work with Sales on customer RFPs, security questionnaires, and other customer security requirements.
• Join customer calls to explain our security controls and approach, addressing concerns.
• Develop and maintain security policies, procedures and documentation as the company grows.
• Support security risk management across systems, vendors and third-party services.
• Build IT and security capabilities towards sustainable in-house ownership.

Skills

IT security

Security engineering

Platform ownership

Cloud security

Identity & access

Secure architecture

Enterprise security

RFPs

InfoSec questionnaires

Stakeholder communication

Documentation

Risk prioritisation

Job description

This role brings IT and security ownership in-house. You'll take responsibility for the platform architecture and security practices that protect Holistic AI's systems, data and the trust of our enterprise customers, working closely with Engineering, leadership and commercial teams as we build and scale our security capabilities.

It's a hands-on role with broad ownership across IT, security, platform architecture and customer security requirements. You'll establish practical security practices, support enterprise customers and make sure security stays embedded in how we build and run our platform.

What you'll do

• Own and advance our IT and security posture across company systems and the product platform.
• Contribute to platform architecture decisions with a security-first lens.
• Establish and maintain practical security controls, access management and operational hygiene.
• Support enterprise customer and audit expectations on security, including the processes and evidence they require.
• Partner with Engineering on secure design, vulnerability management and incident readiness.
• Work with Sales and other teams on customer RFPs, security and InfoSec questionnaires, and other customer security requirements.
• Join customer calls to explain our security controls, practices and approach, and address customer security concerns.
• Develop and maintain security policies, procedures and documentation as the company grows.
• Support security risk management across systems, vendors and third-party services.
• Build IT and security capabilities towards sustainable in-house ownership.

What you'll bring

• 7+ years of experience in IT security, security engineering, or platform or security ownership roles.
• Working knowledge of cloud security, identity and access management, and secure architecture fundamentals.
• Experience supporting enterprise customer security requirements, including RFPs and InfoSec questionnaires.
• Confidence speaking directly with customers and explaining security concepts and controls to technical and non-technical audiences.
• Comfort working independently, getting hands-on where needed and building structure where none exists yet.
• The ability to prioritise risk pragmatically in a growing company: protecting what matters without freezing delivery.
• Clear communication with technical and non-technical stakeholders.
• An ownership mindset and strong documentation habits that support a growing team.

Nice to have

• Experience with security frameworks, audits or compliance requirements such as SOC 2, ISO 27001 or GDPR.

Location and working model

• London, United Kingdom.

Compensation

We offer competitive benefits; details are shared during the hiring process.

Interview process

• HR screen
• Hiring manager interview
• Technical assessment
• Task or skills assignment
• Culture fit
• Offer