Head of Security

The Role We are seeking a Head of Security to build and own the security program that enables Geordie to move incredibly quickly without compromising trust through its next stage of growth. You’ll be joining a rapidly growing team and product that is already serving some of the world’s largest enterprises. You'll combine modern security engineering, thoughtful governance and AI-first operations to ensure our customers, employees and partners can confidently rely on Geordie as we scale. With SOC 2 Type II and ISO 27001 already in place, your mission is to build an effective AI-native security programme that keeps certifications healthy as a byproduct of how we already operate. Initially, you'll be a hands-on individual contributor owning security end-to-end. This includes both product security for the platform our customers trust to govern their agents, and the internal security program that keeps Geordie itself defensible. You'll own security strategy, engineering, governance and compliance while partnering closely with Engineering, our Internal Systems & AI Lead, and the wider leadership team. You'll also be Customer Zero for Geordie. Working closely with our Product and Engineering teams, you'll own the implementation of our platform, ensuring Geordie is the best example of secure AI adoption, thereby shaping the future of the product and industry best practice. What You'll Do Product Security Own product security for the Geordie platform, with secure by design, threat modelling and security architecture review embedded throughout the SDLC, enabling rapid development safely. Drive vulnerability management, penetration testing, and remediation across the product. Act as the stakeholder for product security requirements for authn/authz, tenant isolation, and privileged access Immerse yourself in the agent security domain our customers are focused on: prompt injection, agent supply chain, mcp permissions, and non-human identities Security Engineering & Operations Own security across Geordie's cloud infrastructure and internal environments. Own the company's security roadmap, risk management approach and overall security governance. Own security policy and technical requirements across identity, endpoints, cloud infrastructure and SaaS applications. Partner closely with our Internal Systems & AI Lead, who owns identity platforms, endpoint management, device provisioning and SaaS administration, ensuring security controls are designed, implemented and continuously improved. Lead incident preparedness and response, ensuring Geordie can respond rapidly and effectively when required. Continuously improve monitoring and detection capabilities across the business. AI Native Risk, Governance & Trust Build one of the industry's best AI-native security programs through thoughtful use of AI and automation, growing security leverage through AI rather than manual process. Develop AI-powered workflows that automate investigations, governance, policy enforcement and repetitive security operations. Own Geordie's Information Security Management System (ISMS), automating evidence collection, control monitoring and questionnaire response so that ISO 27001, SOC 2 and audit-readiness are continuously maintained rather than periodically assembled. Partner with Solutions Engineering on customer security questionnaires, due diligence and enterprise security reviews. Ensure the business maintains the operational maturity and trust required to support the world’s largest enterprises. Customer Zero Own Geordie’s implementation of our product, making us the best example anywhere of the product deployed well and an effective agent security programme Validate new capabilities in production before they reach customers, and provide real operator experience to our product engineering teams. Act as an external reference for customers and prospects, showing how a security team actually runs Geordie, and what good agentic governance looks like in practice. Building the Security Function Grow a lean, high-performing security team as the complexity of the business demands it, with automation and AI multiplying what each person can cover Build a strong security culture through practical guidance and enablement, helping the company adopt AI confidently with clear guardrails rather than unnecessary restrictions. Keep security an accelerator for innovation rather than a blocker. Ideal Background You've been through the journey of scaling security at a high-growth B2B SaaS or technology company, having led it, or as a senior member of the team who is now ready to own it. Strong hands-on background across cloud security, application security and security engineering. Comfortable operating as a hands-on individual contributor while building security functions from first principles. Experience maintaining security programs aligned to frameworks such as ISO 27001 and SOC 2. Strong understanding of modern software development, cloud infrastructure and secure engineering practices. Experience partnering closely with engineering organisations to build secure-by-design systems. Curious about AI and excited by the opportunity to build one of the industry's most AI-native security programs. Highly proactive, pragmatic and comfortable operating independently in a fast-moving environment. Why This Role Security is entering one of the most significant periods of change in its history. AI is fundamentally changing how software is built, how businesses operate and how attackers behave. Traditional approaches to security will not be enough. At Geordie, we believe security should enable organisations to adopt AI with confidence rather than slow them down. We also believe the best way to build that future is to live it ourselves. This role offers the opportunity to build Geordie's security program from the ground up, creating a modern, engineering-led security function that enables the business to move quickly while maintaining the trust of our customers. Along the way, you'll help shape the future of one of the fastest-growing AI security companies. Our Values Solve What Matters We listen intently and stay focused on what truly matters to our customers. If it doesn't help them navigate real-world agentic adoption and risk, it's probably not worth building. Build, Learn, Iterate We favour momentum over perfection; testing, learning, and evolving through action. It's how we move fast and get better, together. Kind, Not Comfortable We're honest, respectful, and unafraid to challenge each other. We believe doing great work should feel good, too. Kindness makes that possible.