• Lead and execute a comprehensive information security and IT strategy, including Governance, Risk & Compliance, Security Operations, and Enterprise IT. • Own the design, implementation, and continuous improvement of the company's information security program. • Partner cross-functionally with every aspect of the business to ensure that security is embedded into every layer of the organization. • Oversee IT operations including helpdesk, system administration, and physical network administration, ensuring reliability and security across the environment. • Set the strategy and roadmap for enterprise applications and infrastructure, including identity and access management; evaluate and govern the use of AI-powered productivity and business tools. • Maintain vulnerability management processes including prioritization, remediation tracking, and SLA enforcement; leverage AI tooling to improve detection coverage and triage efficiency. • Lead incident response, coordinating cross-functional teams, managing communications, and driving post-incident reviews. • Own security and IT vendor relationships, contracts, and budgets, including forecasting and investment recommendations. • Deliver regular updates to executive leadership on program status, key risks, and strategic priorities. • Lead, mentor, and develop a team spanning security and IT, managing priorities, workload, and career growth across both operational and strategic work.

• Own strategy and hands-on engineering for Detection and Response platforms; identify, onboard, and normalize all log sources including cloud, containers, endpoints, and SaaS • Build and maintain Security Orchestration, Automation, and Response (SOAR) tooling to reduce response time and analyst toil • Lead incident response for complex threats including developing runbooks, driving post- incident improvements, and designing/running BCP/DR tabletop exercises. • Embed security into the SDLC: threat modeling, secure design reviews, SAST/DAST tooling, and automated security gates in CI/CD pipelines • Own the vulnerability management program at host and application levels; track and drive remediation • Champion "security as code" practices across engineering teams • Build AI-powered security tooling: threat detection and anomaly identification at appropriate confidence thresholds, automated triage and remediation workflows, and AI-assisted post- mortem summarization • Define and implement the security model for LLM-based systems and internal AI tooling • Architect harness patterns to constrain LLM behavior and harden against prompt injection, indirect injection via RAG pipelines, and data exfiltration via model outputs • Evaluate and govern AI tool adoption from a security and data-risk perspective • Own AWS security posture and enforce baselines across Linux/Windows, network devices, and enterprise SaaS (M365, Google Workspace, Azure) • Engineer, configure, and operate EDR, DLP, and endpoint security programs • Provide IAM architecture expertise across identity and access systems • Mentor and actively develop junior and mid-level security engineers through design reviews, pairing, and direct feedback. Growing team capability is a core expectation of this role • Define and drive security engineering standards across the organization • Collaborate closely with IT operations, platform, and software to translate threat intelligence into detection and hardening priorities

• Conduct Factory Production Control (FPC) audits at manufacturer and fabricator facilities throughout the UK and Internationally as required. • Review technical documentation including test reports, assessments, field of application reports and quality documentation. • Prepare technical evaluation reports and certification files for independent certification review and decision. • Support surveillance, maintenance, suspension and withdrawal activities associated with third-party certification schemes. • Ensure certification activities are completed in accordance with ISO/IEC 17065, UKAS requirements, internal procedures and scheme requirements. • Support internal and external audits associated with UKAS accreditation activities. • Maintain accurate certification records and audit documentation. • Provide technically robust and commercially professional support to clients throughout the certification process. • Support the continual development and improvement of UKTC certification schemes and associated technical services. • Represent UKTC professionally during audits, meetings, trade events and industry engagement activities.

• Design realistic **red-team scenarios** for enterprise SaaS and cloud platforms. • Conduct security assessments across collaboration, identity, source-control, and data platforms. • Develop adversarial workflows involving access abuse, data leakage, and privilege escalation. • Evaluate risks related to AI agents, prompt injection, and unauthorized system actions. • Review red-team exercises and assess their technical depth and realism. • Recommend security controls, monitoring approaches, and detection strategies. • Create benchmark scenarios based on current attack methods. • Document findings, attack paths, risks, and remediation recommendations. • Review the work of other security contributors and provide technical feedback.