Security & Privacy Lead (AI)

Location: UK - London Office; Workplace type: Hybrid

Salary: £115K–£145K plus equity

Company

hirify.global assesses and certifies medical devices by combining clinical, technical, regulatory, AI-agent, and software expertise to accelerate certification while maintaining safety standards.

What you will do

• Own and improve hirify.global’s ISO 27001-certified information security management system and GDPR-compliant data privacy programme.
• Implement and maintain security controls hands-on, scaling compliance processes such as policy reviews, evidence collection, and security questionnaires.
• Assess information security and privacy risks for vendors and AI tools.
• Build a secure-by-design internal ecosystem of AI tools and help colleagues use AI safely.
• Lead threat modelling with engineers, commission external penetration tests, and drive findings to resolution.
• Monitor systems and operations for practical vulnerabilities and represent security and privacy to customers.

Requirements

• Experience owning an ISMS through ISO 27001 certification or surveillance audits.
• Experience running a GDPR compliance programme.
• Hands-on experience implementing security controls, not only advising others.
• Evidence of building scalable, repeatable compliance programmes that handle growing volume without a matching increase in manual work.
• Experience assessing information security and data privacy risks of third-party services.
• Experience working with engineers on threat models and penetration-test remediation, including the technical judgement to read and challenge an architecture.
• Ability to explain technical trade-offs clearly to non-technical colleagues and customers.

Nice to have

• Experience in a highly regulated environment such as medical devices or conformity assessment.
• Experience with SOC 2 or other security attestations.
• Knowledge of AI regulation and standards, including the EU AI Act or ISO 42001.
• Experience administering or securing AI platforms or agent tooling in a business setting.
• Experience automating compliance work.

Culture & Benefits

• Hybrid work from the London office.
• Full-time employment with salary of £115K–£145K and equity.
• Work in a certification environment focused on high standards for information security, data privacy, and medical-device safety.

Hiring process

• 30-minute introductory chat, 30-minute compliance knowledge chat, and 30-minute technical knowledge chat; these interviews are remote.
• 45-minute case interview conducted remotely.
• Two 20-minute culture-fit chats conducted onsite.