AI-Native Cyber Security Manager

Lumenalta; United States; A distancia; GBP 90.000 - 130.000; Jornada completa

Descripción de la vacante

Lumenalta is seeking an experienced AI-native Cyber Security Manager to design and deliver AI-assisted security solutions for a new financial services platform. You will guide risk, governance, and vulnerability management while leveraging AI agents to triage findings and draft remediation.

Collaborative, cross-functional leadership is essential. You will promote secure adoption of AI across the organization, manage third-party risk, and report on security KPIs to executives.

Formación

• Five+ years of cybersecurity experience with a focus on risk, governance, and security controls.
• Experience delivering AI-enabled security solutions and translating security requirements to non-technical stakeholders.
• Knowledge of threat intelligence, vulnerability management, and patching processes.
• Hands-on familiarity with AI-driven security workflows and automated reporting.
• Experience with AWS security services and cloud security controls.
• Awareness of privacy, data protection regulations, and compliance frameworks (DPA, GDPR, PCI DSS, SOC1, SOC2, ISO27001).
• Ability to assess third-party tools and vendors for security risk.
• Strong communication skills for executive-level reporting and training.
• Proven problem-solving skills and ability to drive remediation.
• Start-up mindset with agile, iterative delivery.

Responsabilidades

• Lead an AI-native security program, delivering controls aligned to business goals.
• Identify threats using AI-driven intelligence and prioritize mitigations.
• Run an AI-powered vulnerability and patch management program.
• Design AI-driven security workflows for alert triage and evidence collection.
• Provide SME guidance to stakeholders and security partners.
• Roadmap InfoSec technology and ensure regulatory obligations are met.
• Shape security strategy for AI adoption across the org.
• Define and review security KPIs with automated reporting.
• Draft and update cybersecurity policies using AI-assisted tooling.
• Analyze security data to detect external and internal threats across services.

Conocimientos

5+ years cybersecurity

AI-native security

AI threat intelligence

AI tools (Claude)

AI tools (MS Security Copilot)

AWS security services

Threat awareness

Third-party management

Executive communication

Startup / agile mindset

Data protection & GDPR

Educación

CISSP

OSCP

Herramientas

AWS Security Services

Descripción del empleo

We are seeking an experienced, AI-native Cyber Security Manager with a proven track record of delivering security solutions and a passion for using AI to transform how security is done. You will join a Lumenalta team embedded with a new start-up division within an established retail financial services group, helping assemble a brand new financial services platform from the ground up. In this role, you’ll leverage your industry knowledge to design and deliver key security solutions for the platform, using AI tools and agents to do the heavy lifting wherever possible. You will work cross-functionally to identify, prioritize, and remediate risks, and continuously improve the vulnerability management lifecycle through AI-assisted scanning, triage, and patch management.

What You'll Be Doing

• Manage ongoing cyber commitments to the business, delivering operational security controls, risk and governance frameworks, and InfoSec principles and standards that protect the confidentiality, integrity, and availability of systems, data, and information assets.
• Identify emerging threats and vulnerabilities using AI-driven threat intelligence and analysis, ensuring the right countermeasures and mitigations are prioritized and implemented through detection technologies and governance frameworks.
• Run an AI-powered vulnerability and patch management program, using AI agents to triage findings, assess exploitability, and draft remediation, maintaining a clear understanding of technical control measures.
• Design, build, and continuously improve AI-driven security workflows such as alert triage, automated compliance evidence collection, and third-party risk assessment.
• Provide subject matter expertise to internal stakeholders and collaborate with information security partners to stay ahead of industry technologies and evolving threats.
• Deliver the InfoSec technology roadmap, ensuring regulatory obligations are met in line with industry best practices.
• Shape ongoing cybersecurity strategy in an evolving digital landscape, including the secure adoption of AI across the organization.
• Define and review key security performance indicators and use AI tools to automate reporting for management updates and escalations.
• Build and maintain cybersecurity policies, procedures, and processes, using AI to draft them, map them against control frameworks, and keep them current.
• Continuously collect, correlate, and analyze security data with AI and automation to detect external and internal threats across services.
• Prepare the platform for Go Live, ensuring support processes are in place, rolled out to teams, and integrated with the wider parent group.
• Remove team impediments by working collaboratively with stakeholders to proactively manage risks, issues, or delays.

What We're Looking For

• Experience: 5+ years in cybersecurity, ideally with a background in technology disruption or financial services (retail credit preferred).
• AI-Native Security Practice: Demonstrable experience using AI tools and agents (such as Claude, Microsoft Security Copilot, or similar) to perform security work including threat analysis, vulnerability triage, policy drafting, and reporting.
• AI Security Risk: Understanding of the security risks of AI itself, including prompt injection, data leakage, and model misuse, and familiarity with frameworks such as the OWASP Top 10 for LLM Applications and ISO/IEC 42001.
• AWS Security: Strong working knowledge of AWS security services and implementations, including Security Hub, Control Tower, Organizations, SCPs, IAM entities and policies, account lockdown, Macie, and GuardDuty.
• Risk and Compliance: Deep understanding of risk assessment methodologies and compliance requirements, including the Data Protection Act (DPA), GDPR, PCI DSS, SOC1, SOC2, and ISO27001.
• Threat Awareness: Current awareness of InfoSec issues such as emerging vulnerabilities and zero-day exploits, and the ability to identify appropriate countermeasures.
• Third-Party Management: Experience managing third-party suppliers, including the assessment of AI tools and vendors.
• Communication: Ability to convey complex technical information to non-technical stakeholders and executives through reports, policies, and security training.
• Problem Solving: Strong ability to analyze complex problems, troubleshoot security incidents, and develop effective mitigations.
• Start-up Mindset: Comfortable with agile frameworks and iterative, AI-first delivery. Curious, experimentally minded, decisive, able to ruthlessly prioritize, and a champion of radical candor.

Desirable Qualifications

• Certified Information Systems Security Professional (CISSP)
• Offensive Security Certified Professional (OSCP)

Why Lumenalta is an amazing place to work

• Be 100% dedicated to one project at a time so that you can innovate and grow.
• Be a part of a team of talented and friendly senior-level engineers and specialists.
• Work on projects that allow you to use leading tech.

Location

This is a fully remote position. This role is open to candidates based in Europe. Availability to work UK time zone business hours.

Application Deadline

Applications will be accepted until November 8th, 2026. Candidates can expect feedback by November 16th, 2026.