Head Of Security

As our first Head of Security, you'll own security across the company: product, infrastructure, corporate, and compliance. You'll set the strategy, build the team, and grow into the CISO role as we scale.

Responsibilities

Own the security strategy and roadmap across application, cloud, corporate, and AI security; Build and lead the security team, hiring across AppSec, cloud, and GRC as we grow; Embed secure-by-design practices into engineering, covering threat modelling, the secure SDLC, and pentest and bug bounty programs; Own ISO 27001, SOC 2, and emerging AI standards such as ISO 42001, plus GDPR and HIPAA readiness for healthcare customers; Act as the security voice to enterprise customers: due diligence, executive briefings, and contractual security terms; Lead incident response and report security risk to the exec team and board; Set guardrails for how Encord builds with and adopts AI, including LLM risks, data handling, and vendor reviews

Requirements

10+ years in security, including 3+ years owning or leading the security function at a high-growth tech or SaaS company; Strong technical depth in at least one of AppSec or cloud security (GCP ideal), with enough breadth to lead across all domains; A track record of delivering ISO 27001 and/or SOC 2 as the accountable owner; Experience building and managing security teams from early stage; Credibility with engineers, enterprise customers, and the board, with a pragmatic approach that enables speed rather than blocking it

Nice to have

Experience securing ML/AI platforms or data-intensive products; Experience in regulated sectors such as healthcare, life sciences, or automotive; A background as a hands-on engineer before moving into leadership

Benefits

Competitive salary, and meaningful equity in a high-growth startup; Strong in-person culture; 25 days annual leave + UK public holidays; Annual learning & development budget; Travel for customer visits, events, and conferences across the UK and Europe; Daily company lunches; Monthly socials & bi-annual team offsites