Cyber Security Manager (AI Native)

As AI Native Cyber Security Manager, you will lead security for Castle Fintech’s new financial services platform, leveraging AI to automate analysis, triage and reporting. You’ll partner with cross-functional teams to embed risk management, governance and secure-by-design practices in an agile, startup-like environment within an established organisation. You will drive AI-assisted vulnerability management, threat intelligence and policy development to enable rapid, secure delivery at scale. This role offers a chance to shape security strategy and tooling in a fast-growing fintech initiative.

• hybrid working
• 24 days holiday + 8 bank holidays (+ option to buy 10 days)
• annual bonus
• enhanced maternity and adoption leave
• pension with up to 8% N Brown contribution
• mental health support and wellbeing services

• Oversee cyber security commitments and governance for the Castle Fintech business
• Identify emerging threats using AI-driven analysis and implement mitigations
• Provide security expertise across internal stakeholders and align with industry standards
• Remove impediments by collaborating with stakeholders to manage risks and delays
• Develop and maintain cyber security policies with AI-aided drafting and mapping to frameworks
• Optimize AI-enabled tools and processes for threat response and future-proofing
• Ensure continuous collection and analysis of security data using AI and automation
• Design and improve AI-driven security workflows (alert triage, evidence collection, third-party risk)
• Prepare Fintech for Go Live with integrated support processes
• Automate management reporting and escalations with AI tools
• Define security KPIs to measure service delivery and improvements
• Oversee vulnerability and patch management using AI triage and remediation drafting
• Shape ongoing cyber security strategy and secure AI adoption across Castle
• Deliver the InfoSec technology roadmap aligned with regulatory best practices

• Experience using AI tools and agents (e.g., Claude, Microsoft Security Copilot) for threat analysis, triage, policy drafting and reporting
• Strong knowledge of AWS security services (Security Hub, Control Tower, IAM, SCPs, Macie, GuardDuty)
• Security compliance experience (DPA, GDPR, PCI DSS, SOC1, SOC2, ISO27001)
• Awareness of current information security issues, vulnerabilities and mitigations
• Understanding of risk assessment methodologies and risk prioritisation
• Experience managing third-party suppliers and AI tool vendors
• Ability to communicate complex security topics to non-technical stakeholders
• Analytical problem-solving and incident response capabilities
• Awareness of AI security risks (prompt injection, data leakage, model misuse) and OWASP Top 10 for LLMs, ISO/IEC 42001
• Familiarity with cross-team collaboration and security training

• Strong communication
• Collaborative mindset
• Adaptability
• Claude or Microsoft Security Copilot
• AWS Security Hub
• AWS Control Tower