Job description

#### Role Overview We are seeking an experienced, AI-native Cyber Security Manager with a proven track record of delivering security solutions and a passion for using AI to transform how security is done. You will join a Lumenalta team embedded with a new start-up division within an established retail financial services group, helping assemble a brand new financial services platform from the ground up. In this role, you’ll leverage your industry knowledge to design and deliver key security solutions for the platform, using AI tools and agents to do the heavy lifting wherever possible. You will work cross-functionally to identify, prioritize, and remediate risks, and continuously improve the vulnerability management lifecycle through AI-assisted scanning, triage, and patch management. #### What You'll Be Doing * Manage ongoing cyber commitments to the business, delivering operational security controls, risk and governance frameworks, and InfoSec principles and standards that protect the confidentiality, integrity, and availability of systems, data, and information assets. * Identify emerging threats and vulnerabilities using AI-driven threat intelligence and analysis, ensuring the right countermeasures and mitigations are prioritized and implemented through detection technologies and governance frameworks. * Run an AI-powered vulnerability and patch management program, using AI agents to triage findings, assess exploitability, and draft remediation, maintaining a clear understanding of technical control measures. * Design, build, and continuously improve AI-driven security workflows such as alert triage, automated compliance evidence collection, and third-party risk assessment. * Provide subject matter expertise to internal stakeholders and collaborate with information security partners to stay ahead of industry technologies and evolving threats. * Deliver the InfoSec technology roadmap, ensuring regulatory obligations are met in line with industry best practices. * Shape ongoing cybersecurity strategy in an evolving digital landscape, including the secure adoption of AI across the organization. * Define and review key security performance indicators and use AI tools to automate reporting for management updates and escalations. * Build and maintain cybersecurity policies, procedures, and processes, using AI to draft them, map them against control frameworks, and keep them current. * Continuously collect, correlate, and analyze security data with AI and automation to detect external and internal threats across services. * Prepare the platform for Go Live, ensuring support processes are in place, rolled out to teams, and integrated with the wider parent group. * Remove team impediments by working collaboratively with stakeholders to proactively manage risks, issues, or delays. #### What We're Looking For * Experience: 5+ years in cybersecurity, ideally with a background in technology disruption or financial services (retail credit preferred). * AI-Native Security Practice: Demonstrable experience using AI tools and agents (such as Claude, Microsoft Security Copilot, or similar) to perform security work including threat analysis, vulnerability triage, policy drafting, and reporting. * AI Security Risk: Understanding of the security risks of AI itself, including prompt injection, data leakage, and model misuse, and familiarity with frameworks such as the OWASP Top 10 for LLM Applications and ISO/IEC 42001. * AWS Security: Strong working knowledge of AWS security services and implementations, including Security Hub, Control Tower, Organizations, SCPs, IAM entities and policies, account lockdown, Macie, and GuardDuty. * Risk and Compliance: Deep understanding of risk assessment methodologies and compliance requirements, including the Data Protection Act (DPA), GDPR, PCI DSS, SOC1, SOC2, and ISO27001. * Threat Awareness: Current awareness of InfoSec issues such as emerging vulnerabilities and zero-day exploits, and the ability to identify appropriate countermeasures. * Third-Party Management: Experience managing third-party suppliers, including the assessment of AI tools and vendors. * Communication: Ability to convey complex technical information to non-technical stakeholders and executives through reports, policies, and security training. * Problem Solving: Strong ability to analyze complex problems, troubleshoot security incidents, and develop effective mitigations. * Start-up Mindset: Comfortable with agile frameworks and iterative, AI-first delivery. Curious, experimentally minded, decisive, able to ruthlessly prioritize, and a champion of radical candor. #### Desirable Qualifications * Certified Information Systems Security Professional (CISSP) * Offensive Security Certified Professional (OSCP) #### Why Lumenalta is an amazing place to work * Be 100% dedicated to one project at a time so that you can innovate and grow. * Be a part of a team of talented and friendly senior-level engineers and specialists. * Work on projects that allow you to use leading tech. #### Location This is a fully remote position; however, candidates must be based in regions that align with UK time zones to ensure effective collaboration with client and team schedules. #### Application Deadline Applications will be accepted until **October 25th, 2026**. Candidates can expect feedback by **November 2nd, 2026**.

Requirements

Must-haves

#### Role Overview
#### What You'll Be Doing
Run an AI-powered vulnerability and patch management program, using AI agents to triage findings, assess exploitability, and draft remediation, maintaining a clear understanding of technical control measures.
Design, build, and continuously improve AI-driven security workflows such as alert triage, automated compliance evidence collection, and third-party risk assessment.
Provide subject matter expertise to internal stakeholders and collaborate with information security partners to stay ahead of industry technologies and evolving threats.
Deliver the InfoSec technology roadmap, ensuring regulatory obligations are met in line with industry best practices.
Shape ongoing cybersecurity strategy in an evolving digital landscape, including the secure adoption of AI across the organization.
Define and review key security performance indicators and use AI tools to automate reporting for management updates and escalations.
Build and maintain cybersecurity policies, procedures, and processes, using AI to draft them, map them against control frameworks, and keep them current.
Continuously collect, correlate, and analyze security data with AI and automation to detect external and internal threats across services.
Prepare the platform for Go Live, ensuring support processes are in place, rolled out to teams, and integrated with the wider parent group.
Remove team impediments by working collaboratively with stakeholders to proactively manage risks, issues, or delays.
#### What We're Looking For
AWS Security: Strong working knowledge of AWS security services and implementations, including Security Hub, Control Tower, Organizations, SCPs, IAM entities and policies, account lockdown, Macie, and GuardDuty.
Risk and Compliance: Deep understanding of risk assessment methodologies and compliance requirements, including the Data Protection Act (DPA), GDPR, PCI DSS, SOC1, SOC2, and ISO27001.
Threat Awareness: Current awareness of InfoSec issues such as emerging vulnerabilities and zero-day exploits, and the ability to identify appropriate countermeasures.
Third-Party Management: Experience managing third-party suppliers, including the assessment of AI tools and vendors.
Communication: Ability to convey complex technical information to non-technical stakeholders and executives through reports, policies, and security training.
Problem Solving: Strong ability to analyze complex problems, troubleshoot security incidents, and develop effective mitigations.
Start-up Mindset: Comfortable with agile frameworks and iterative, AI-first delivery. Curious, experimentally minded, decisive, able to ruthlessly prioritize, and a champion of radical candor.
#### Desirable Qualifications
Certified Information Systems Security Professional (CISSP)
Offensive Security Certified Professional (OSCP)

Nice-to-haves

Experience: 5+ years in cybersecurity, ideally with a background in technology disruption or financial services (retail credit preferred).

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aigollmawsagile

Platform: careers-page
Effort: medium

Benefits

Benefits detected in the listing.

Vision