Security Engineering Manager

Job Title

Job Description

Role Overview

As a Security Engineering Manager, you will play a critical role in executing security initiatives that protect our systems, data, and infrastructure. We’re looking for a seasoned generalist—someone who has touched most areas of cybersecurity and can adapt quickly to new challenges. You’ll work closely with IT, engineering, and risk teams to implement and maintain security controls, evaluate new designs, and drive continuous improvement across our security posture.

You will also lead the practical application of artificial intelligence (AI) to security use cases, working in a product delivery model where security capabilities are treated as products with clear owners, roadmaps, user outcomes and measurable value, delivered iteratively through agile, multi-disciplinary squads.

Role Responsibilities

Security Engineering & Consulting:

• Lead and support the implementation of security projects
• Ability to review, maintain and configure security tooling throughout the organisation
• Evaluate and enhance existing security controls, policies, and procedures.
• Perform risk assessments and recommend mitigation strategies, whilst informing technology and business owners to communicate current Resilience and risk exposure.
• Provide Technical Security consultancy to projects
• Engage effectively with risk, legal, privacy, data governance and enterprise architecture
• Provide support and guidance through secure by design competencies (Attack mapping, threat modelling)
• Conduct vulnerability assessments and coordinate remediation efforts.
• Collaborate with Dev Ops and IT teams to integrate security into infrastructure and application design and development life cycles.
• Support compliance efforts (e.g., SOC 2, ISO 27001, etc.) through documentation and control testing.
• Knowledge sharing with team members and promote a culture of security awareness

AI-Enabled Security Capabilities (Product Delivery Model):

• Identify, prioritise and deliver artificial intelligence (AI) and machine learning use cases that measurably improve security outcomes – for example vulnerability prioritisation, control assurance and evidence gathering.
• Own AI-enabled security capabilities as products rather than projects: define the problem statement and user need, maintain a prioritised backlog and roadmap, and deliver iteratively through discovery, proof of value, pilot and scaled adoption.
• Apply security automation and orchestration, including large language model (LLM) and agent-based approaches, to reduce manual effort in security engineering workflows, with appropriate human oversight of automated decisions.
• Work with data, platform and engineering teams to ensure the data quality, pipelines, integration and tooling needed to support AI-enabled security capabilities at scale.
• Ensure AI use in security is safe, explainable and compliant – working with risk, privacy, data governance and compliance teams to meet internal AI governance standards and applicable regulatory expectations across our operating jurisdictions.
• Advise on securing the organisation’s own AI adoption, including model and prompt security, data leakage, third-party AI services and AI-specific threats (for example prompt injection, model misuse and adversarial inputs).

Skills & Experience

• 7+ years of experience in cybersecurity roles, preferably in finance services or insurance sectors.
• Broad knowledge of security domains: network security, endpoint protection, Secure development lifecycle, identity and access management, cloud security (AWS/Azure), incident response, and governance.
• Hands-on experience with SIEM, EDR, vulnerability management tools, and cloud-native security services.
• Demonstrable experience applying artificial…