geordieai - Head of Security

• PRODUCT SECURITY • Own product security for the Geordie platform, with secure by design, threat modelling and security architecture review embedded throughout the SDLC, enabling rapid development safely. • Drive vulnerability management, penetration testing, and remediation across the product. • Act as the stakeholder for product security requirements for authn/authz, tenant isolation, and privileged access • Immerse yourself in the agent security domain our customers are focused on: prompt injection, agent supply chain, mcp permissions, and non-human identities • SECURITY ENGINEERING & OPERATIONS • Own security across Geordie's cloud infrastructure and internal environments. • Own the company's security roadmap, risk management approach and overall security governance. • Own security policy and technical requirements across identity, endpoints, cloud infrastructure and SaaS applications. • Partner closely with our Internal Systems & AI Lead, who owns identity platforms, endpoint management, device provisioning and SaaS administration, ensuring security controls are designed, implemented and continuously improved. • Lead incident preparedness and response, ensuring Geordie can respond rapidly and effectively when required. • Continuously improve monitoring and detection capabilities across the business. • AI NATIVE RISK, GOVERNANCE & TRUST • Build one of the industry's best AI-native security programs through thoughtful use of AI and automation, growing security leverage through AI rather than manual process. • Develop AI-powered workflows that automate investigations, governance, policy enforcement and repetitive security operations. • Own Geordie's Information Security Management System (ISMS), automating evidence collection, control monitoring and questionnaire response so that ISO 27001, SOC 2 and audit-readiness are continuously maintained rather than periodically assembled. • Partner with Solutions Engineering on customer security questionnaires, due diligence and enterprise security reviews. • Ensure the business maintains the operational maturity and trust required to support the world’s largest enterprises. • Own Geordie’s implementation of our product, making us the best example anywhere of the product deployed well and an effective agent security programme • Validate new capabilities in production before they reach customers, and provide real operator experience to our product engineering teams. • Act as an external reference for customers and prospects, showing how a security team actually runs Geordie, and what good agentic governance looks like in practice. • BUILDING THE SECURITY FUNCTION • Grow a lean, high-performing security team as the complexity of the business demands it, with automation and AI multiplying what each person can cover • Build a strong security culture through practical guidance and enablement, helping the company adopt AI confidently with clear guardrails rather than unnecessary restrictions. • Keep security an accelerator for innovation rather than a blocker. • IDEAL BACKGROUND • You've been through the journey of scaling security at a high-growth B2B SaaS or technology company, having led it, or as a senior member of the team who is now ready to own it. • Strong hands-on background across cloud security, application security and security engineering. • Comfortable operating as a hands-on individual contributor while building security functions from first principles. • Experience maintaining security programs aligned to frameworks such as ISO 27001 and SOC 2. • Strong understanding of modern software development, cloud infrastructure and secure engineering practices. • Experience partnering closely with engineering organisations to build secure-by-design systems.