Aimed at senior security professionals with comprehensive technical and leadership experience who are comfortable working in a high-agency, in-person culture in London.
Derived from job-description analysis by Serendipath's career intelligence engine.
Original posting from Encord via Ashby
ABOUT US
Encord is the universal data layer for AI that helps 300+ AI teams train and run models on the right data. Our platform indexes, curates, annotates, and evaluates data across the full AI lifecycle, from development through production.
Trusted by Woven by Toyota, AXA, UiPath, Zipline, and more. We're an ambitious team of 100+ working at the frontier of AI and have raised $60M in Series C funding from Wellington Management, CRV, Next47 and Y Combinator.
The role
Encord is the data layer for Physical AI and enterprise AI, trusted by 300+ teams including Toyota, Hitachi, and AbbVie with their most sensitive real-world data. As our first Head of Security, you'll own security across the company: product, infrastructure, corporate, and compliance. You'll set the strategy, build the team, and grow into the CISO role as we scale.
What you'll do
- Own the security strategy and roadmap across application, cloud, corporate, and AI security.
- Build and lead the security team, hiring across AppSec, cloud, and GRC as we grow.
- Embed secure-by-design practices into engineering, covering threat modelling, the secure SDLC, and pentest and bug bounty programs.
- Own ISO 27001, SOC 2, and emerging AI standards such as ISO 42001, plus GDPR and HIPAA readiness for healthcare customers.
- Act as the security voice to enterprise customers: due diligence, executive briefings, and contractual security terms.
- Lead incident response and report security risk to the exec team and board.
- Set guardrails for how Encord builds with and adopts AI, including LLM risks, data handling, and vendor reviews.
What we're looking for
- 10+ years in security, including 3+ years owning or leading the security function at a high-growth tech or SaaS company.
- Strong technical depth in at least one of AppSec or cloud security (GCP ideal), with enough breadth to lead across all domains.
- A track record of delivering ISO 27001 and/or SOC 2 as the accountable owner.
- Experience building and managing security teams from early stage.
- Credibility with engineers, enterprise customers, and the board, with a pragmatic approach that enables speed rather than blocking it.
Nice to have
- Experience securing ML/AI platforms or data-intensive products.
- Experience in regulated sectors such as healthcare, life sciences, or automotive.
- A background as a hands-on engineer before moving into leadership.
Why Encord
- Competitive salary, and meaningful equity in a high-growth startup
- Strong in-person culture — most of the team works from our London office 4+ days/week
- 25 days annual leave + UK public holidays
- Annual learning & development budget
- Travel for customer visits, events, and conferences across the UK and Europe
- Daily company lunches
- Monthly socials & bi-annual team offsites
OPERATING PRINCIPLES
HIGH AGENCY
You see something broken, you fix it or find the person who can. We celebrate the people who solve 90% of a problem before anyone asks.
Build with care & urgency
We bear-hug the customer. Former founders and people from fast-moving, high-stakes environments thrive here.
Self-aware & hungry
We stay warm, self-aware, and genuinely hungry. We elevate our peers, and ego doesn't last long.
Invent in real time
We move toward the ambiguity. We’re pragmatic, resourceful, energized by the fact that there's no playbook.
If you're looking to do the most meaningful work of your career alongside people who push you to be better, we'd love to meet you.
Source: Encord careers (Ashby)