Principal Consultant - AI Security & Governance (SME)

Location: Leeds / Hybrid

Company

hirify.global is a growing AI-native technology consultancy with established AI engineering capability and client demand.

What you will do

• Advise boards, audit committees, and risk committees on AI risk, governance, and risk appetite.
• Design and implement AI governance frameworks, policies, controls, and assurance approaches.
• Support clients with the EU AI Act, UK GDPR, DPIAs, NIST AI RMF, and ISO 42001.
• Threat-model GenAI and agentic AI systems, including prompt injection, data leakage, excessive agency, and tool-use escalation.
• Review AI architectures, guardrails, evaluations, identity, access, DLP, and non-human identity risks from proof of concept through production.
• Lead client workshops, contribute to proposals and pre-sales, and develop reusable security and governance frameworks.

Requirements

• Experience in security, risk, data, GRC, or a related field, with a strong consulting and client-facing background.
• Experience designing governance frameworks, risk assessments, policies, and controls for regulated organisations.
• Practical understanding of how AI systems are built and secured, including LLMs, RAG, agentic AI, tool use, and orchestration.
• Knowledge of AI security risks, including prompt injection, data leakage, and excessive agency.
• Strong understanding of the EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF, and ISO 42001.
• Ability to communicate effectively with senior executives and technical teams.

Nice to have

• AWS, Azure, or GCP security experience, including IAM and cloud security.
• Python or scripting skills and experience with model risk management or second-line risk.
• Experience with AI governance and data security platforms such as OneTrust, Purview, Varonis, BigID, or Credo AI.
• Financial services experience, relevant professional certifications, or UK SC clearance eligibility.

Culture & Benefits

• Opportunity to build the security, governance, and assurance layer around an existing AI engineering proposition.
• Broad Principal-level scope spanning board advisory, technical AI security, governance, delivery, and pre-sales.
• Work within a growing specialist technology consultancy.